Hybrid SOC Analyst – Real-Time Cyber Defence

Civil Aviation Authority; England; Hybrid; GBP 34,000 - 42,000; Full time

Benefits offered by this job

Flexible & hybrid working

28 days annual leave + public holidays

Generous pension scheme

Wellbeing Room

Mental Health support

Employee Assistance Programme

Free onsite gym

EV charging points

Skillsoft training

Job summary

The Civil Aviation Authority is establishing a dedicated Security Operations Centre at Gatwick. We are seeking a SOC Analyst to monitor, triage and investigate security events that could impact our operations, systems or data in real time as part of a growing cyber defence capability.

You will join a team of analysts in a hybrid role, handling investigations with autonomy, supporting continuous improvement to monitoring and response, and collaborating with IT, network and application teams.

Qualifications

• Experience in a SOC, threat detection, or security operations environment.
• Working knowledge of SIEM and EDR platforms (especially Microsoft Sentinel and Defender).
• Understanding of Windows, Active Directory, and basic networking concepts.
• Familiarity with the incident response process and evidence handling.
• Analytical mindset and attention to detail to identify IOC(s).
• Ability to work under pressure and manage multiple investigations.
• CompTIA Security+ certification or equivalent foundational knowledge.

Responsibilities

• Monitor, triage and investigate security events that could impact operations, systems or data.
• Handle investigations with autonomy within a SOC team and support continuous improvement of monitoring and response capabilities.

Skills

SOC environment experience

SIEM/EDR knowledge

Windows/AD basics

Incident response process

IOC detection

Communication skills

Collaboration

Education

CompTIA Security+

Tools

Microsoft Sentinel

Microsoft Defender

Job description

The Civil Aviation Authority is establishing a dedicated Security Operations Centre at Gatwick. We are seeking a SOC Analyst to monitor, triage and investigate security events that could impact our operations, systems or data in real time as part of a growing cyber defence capability.

You will join a team of analysts in a hybrid role, handling investigations with autonomy, supporting continuous improvement to monitoring and response, and collaborating with IT, network and application teams.