Lead SOC Analyst - Glasgow, 12mths, 653 pd Inside- security cleared

SmartSourcing Ltd; Glasgow; On-site; GBP 80,000 - 100,000; Full time

Job summary

A government services provider based in Glasgow is seeking a Cyber Security Lead SOC Analyst. The role requires extensive experience with SPLUNK and a background in cybersecurity, as well as strong analytical skills to monitor and respond to potential threats. You will work in a DV Security cleared environment with a shift pattern that includes weekends. Competitive compensation at £653 per day through an umbrella company. Ideal candidates will hold SC or DV Security Clearance.

Qualifications

• Experience working in a Security Operations Centre (SOC) required.
• Bachelor's degree in computer science or relevant experience preferred.
• Foundational understanding of networking and operating systems necessary.

Responsibilities

• Monitor security tools to detect suspicious activity.
• Analyze alerts and logs to distinguish between security incidents and false positives.

Skills

Experience of SPLUNK in a Security Operations Centre (SOC)

Foundational understanding of networking concepts (TCP / IP, DNS)

Operating systems (Windows, Linux)

CompTIA Security+, Cybersecurity Analyst (CySA+)

Education

Bachelor's degree in computer science or Cyber Security

Job description

Cyber Security Lead SOC Analyst, Splunk, Security Cleared, required by our government services client at their Glasgow base.

Paying 653 per day - Umbrella Company

Working in an DV (Developed Vetting) Security cleared environment. You will hold a current DV or SC Security Clearance , or be eligible to undertake.

The role requires working as part of a 24 / 7 shift pattern. This pattern will include weekends and bank holidays.

To start in the New Year

Skills and Experience Required:

• Experience of SPLUNK with in a Security Operations Centre (SOC).
• A bachelor's degree in computer science, Cyber Security or relevant experience
• You should have a foundational understanding of networking concepts (TCP / IP, DNS, etc.), operating systems (Windows, Linux), and common cyber-attack techniques.
• Certifications like CompTIA Security+, Cybersecurity Analyst (CySA+), or a similar certification are a significant bonus to the role

Key Responsibilities

Continuous Monitoring

You will monitor security tools, including Security Information and Event Management (SIEM) systems, to detect suspicious activity. You will be the first to see potential threats and will need to be efficient and professional response against defined processes.

Incident Triage

You will analyse alerts and logs to determine if an event is a genuine security incident or a false pos...