Junior SOC Analyst: 24/7 Security Operations & SIEM

NTT DATA; Birmingham; On-site; GBP 28,000 - 38,000; Full time

Job summary

NTT DATA UK is recruiting a Security Analyst (Level 1) for the UK Sovereign SOC. This frontline, 24/7 role focuses on monitoring, triaging, and investigating security alerts using SIEM and SOAR platforms to protect monitored environments.

You will perform first‑line investigations, validate alerts, and maintain high‑quality incident tickets while following runbooks and escalation paths. Strong attention to detail and disciplined execution are essential in this high‑volume operation.

Qualifications

• Foundational cyber security concepts including TCP/IP and logs.
• Familiarity with SIEM/SOAR and incident handling processes.
• Proficiency with Windows, Linux, macOS and MS Office tools.
• Entry-level cyber security certifications desirable (CySA+, SC-200).

Responsibilities

• Continuously monitor security alerts across environments.
• Triage and analyse alerts, prioritising per incident policy.
• Conduct first-line investigations using SIEM/SOAR, validate alerts.
• Gather evidence, assess impact, and escalate to senior analysts.
• Maintain incident tickets and produce clear summaries and notes.

Skills

Cyber security concepts

SIEM/ SOAR familiarity

Analytical thinking

Clear communication

Education

CySA+

SC-200

Tools

Splunk

Microsoft Sentinel

Azure

AWS

Job description

NTT DATA UK is recruiting a Security Analyst (Level 1) for the UK Sovereign SOC. This frontline, 24/7 role focuses on monitoring, triaging, and investigating security alerts using SIEM and SOAR platforms to protect monitored environments.

You will perform first‑line investigations, validate alerts, and maintain high‑quality incident tickets while following runbooks and escalation paths. Strong attention to detail and disciplined execution are essential in this high‑volume operation.