Lead SOC Analyst-SC/DV Cleared-East Midlands 655

SmartSourcing Ltd; England; On-site; GBP 100,000 - 125,000; Full time

Job summary

A government services client in the UK is seeking a Cyber Security Lead SOC Analyst to monitor and respond to security threats. The role requires a current DV or SC Security Clearance, experience with SPLUNK, and a Bachelor's degree in Cyber Security. Key responsibilities include monitoring security tools, analyzing incidents, and directing junior members. Candidates must be able to work in a 24/7 shift pattern, including weekends. The position offers competitive daily rates.

Benefits

Disability Confident Employer commitment to diversity

Qualifications

• Current DV or SC Security Clearance or eligibility to undertake it.
• Ability to work in a 24/7 shift pattern, including weekends and holidays.

Responsibilities

• Monitor security tools for suspicious activity.
• Analyse alerts to determine genuine security incidents.
• Perform initial containment actions for confirmed incidents.
• Create detailed tickets and reports for all detected incidents.
• Provide direction and support to junior team members.
• Assist in the maintenance of security tools.

Skills

Experience of SPLUNK in a Security Operations Centre (SOC)

Foundational understanding of networking concepts

Operating systems (Windows, Linux)

Certifications such as CompTIA Security+ or Cybersecurity Analyst (CySA+)

Education

Bachelor's degree in computer science or Cyber Security

Job description

Cyber Security Lead SOC Analyst (Splunk, DV Security Cleared)

Required by our government services client based Milton Keynes, Bucks; commutable from Northampton, East Midlands, Bedford, Luton, Peterborough.

Paying £655 a day – Umbrella Company

Working in a DV (Developed Vetting) Security cleared environment. You will hold a current DV or SC Security Clearance, or be eligible to undertake.

The role requires working as part of a 24/7 shift pattern, including weekends and bank holidays.

To start in the New Year.

Skills and Experience Required

• Experience of SPLUNK in a Security Operations Centre (SOC).
• A bachelor's degree in computer science or Cyber Security.
• Foundational understanding of networking concepts (TCP/IP, DNS, etc.), operating systems (Windows, Linux), and common cyber‑attack techniques.
• Certifications such as CompTIA Security+, Cybersecurity Analyst (CySA+), or similar are a significant bonus to the role.

Key Responsibilities

• Continuous Monitoring – You will monitor security tools, including Security Information and Event Management (SIEM) systems, to detect suspicious activity. You will be the first to see potential threats and will need to be efficient and professional response against defined processes.
• Incident Triage – You will analyse alerts and logs to determine if an event is a genuine security incident or a false positive. You will need to be methodical and follow established procedures to classify and prioritise incidents.
• Initial Incident Response – For confirmed incidents, you will perform initial containment actions, such as isolating affected systems, and escalates the incident to a Level 2 or 3 analyst for deeper investigation.
• Reporting and Documentation – You'll create detailed tickets and reports for all detected incidents, documenting your findings and the steps you took. This is crucial for tracking incidents and for future analysis.
• Managing – You will provide direction and support to the junior member of the shift and provide handover to the next shift leader.
• Tool Management – You will assist in the maintenance and optimisation of security tools, ensuring they are working correctly and effectively.

Please apply online in the first instance.

SmartSourcing are a Disability Confident Employer and we promote, celebrate and value diversity, we are committed to promoting equality and inclusion for all.