Experienced 24/7 SOC Analyst - MSP/MSSP, Remote

Nomios; Basingstoke; Hybrid; GBP 42,000 - 66,000; Full time

Benefits offered by this job

Competitive salary

Industry-leading benefits

Job summary

Nomios is seeking an experienced SOC Analyst for its 24/7 Security Operations Centre. The role supports multiple customer environments, focusing on investigation and attacker behaviour to enhance SOC capabilities.

You’ll work with platforms like Microsoft Sentinel, Defender, XSIAM/XDR/XSOAR, and CrowdStrike Falcon. You will be part of a collaborative, ongoing-improvement culture with clear career paths into Threat Intelligence, SOC Engineering, Incident Response and senior roles.

Qualifications

• Hands-on experience in a Security Operations Centre and multi-client environments.
• Experience with MSP/MSSP backgrounds preferred and escalations across multiple environments.
• Strong understanding of attacker behaviours, TTPs and malware chains.
• Ability to read Windows logs, network telemetry and log sources.

Responsibilities

• Monitor, investigate and triage security events across SIEM/EDR/XDR.
• Follow SOC runbooks and maintain investigation notes and timelines.
• Escalate complex cases to senior staff with context; support detections improvement.
• Provide clear customer updates and participate in shift handovers.

Skills

SOC operations

Threat hunting

Incident response

Communication

Windows event logs

Mitre ATT&CK

KQL/CQL

Education

Cyber security degree

Tools

Microsoft Sentinel

Microsoft Defender

Palo Alto XSIAM/XDR/XSOAR

SentinelOne

CrowdStrike Falcon

Google SecOps

Job description

Nomios is seeking an experienced SOC Analyst for its 24/7 Security Operations Centre. The role supports multiple customer environments, focusing on investigation and attacker behaviour to enhance SOC capabilities.

You’ll work with platforms like Microsoft Sentinel, Defender, XSIAM/XDR/XSOAR, and CrowdStrike Falcon. You will be part of a collaborative, ongoing-improvement culture with clear career paths into Threat Intelligence, SOC Engineering, Incident Response and senior roles.