Read more

OM Soft Solutions Limited; Elstree; On-site; GBP 55,000 - 75,000; Full time

Job summary

OM Soft Solutions is seeking a skilled SOC Analyst to strengthen its cybersecurity team. The role focuses on monitoring security events, investigating threats, and supporting incident response to protect critical assets.

You will work with SIEM/EDR, analyze logs from firewalls, endpoints, and cloud platforms, collaborate with IT and stakeholders, and help improve detection use cases and playbooks to keep pace with evolving threats.

Responsibilities

• Utilize security platforms (SIEM, EDR/XDR, threat intel, vulnerability management, case management) to investigate and respond to threats.
• Analyze logs and telemetry from firewalls, IDS/IPS, endpoints, antivirus, cloud platforms to detect IOCs and anomalies.
• Triage, assess and prioritize security alerts based on risk and severity.
• Investigate and respond to cybersecurity incidents including malware infections, phishing attacks, unauthorized access attempts, insider threats, and potential data breaches.
• Contain, mitigate, remediate, and document security incidents in accordance with incident response procedures.
• Operate and maintain security technologies including SIEM platforms, endpoint security solutions, IDS/IPS, firewalls, and PKI services.
• Continuously monitor network traffic, security events, system logs, and alerts to identify suspicious activity, potential threats, and security incidents.
• Collaborate with IT, security, and business stakeholders to investigate and resolve security-related issues.
• Maintain accurate incident records, investigation notes, and response activities to support compliance and audit requirements.
• Contribute to the continuous improvement of security monitoring capabilities, detection use cases, playbooks, and response processes.
• Stay up to date with emerging cyber threats, vulnerabilities, attacker TTPs, and industry best practices.

Job description

OM Soft Solutions is looking for a skilled and motivated SOC Analyst to join our cybersecurity team. The successful candidate will be responsible for monitoring security events, detecting and investigating potential threats, identifying vulnerabilities, and supporting the timely response and resolution of security incidents. The ideal candidate will have strong technical knowledge, excellent analytical and problem-solving skills, and the ability to work effectively in a fast-paced security environment.

• Utilize security platforms including SIEM, EDR/XDR, threat intelligence, vulnerability management, and case management tools to investigate and respond to threats.
• Analyze logs and telemetry from firewalls, IDS/IPS, endpoints, antivirus solutions, cloud platforms, and other security technologies to detect indicators of compromise (IOCs) and anomalous activity.
• Triage, assess, and prioritize security alerts based on risk and severity.
• Investigate and respond to cybersecurity incidents including malware infections, phishing attacks, unauthorized access attempts, insider threats, and potential data breaches.
• Contain, mitigate, remediate, and document security incidents in accordance with established incident response procedures.
• Operate and maintain security technologies including SIEM platforms, endpoint security solutions, IDS/IPS, firewalls, and PKI services.
• Continuously monitor network traffic, security events, system logs, and alerts to identify suspicious activity, potential threats, and security incidents.
• Collaborate with IT, security, and business stakeholders to investigate and resolve security-related issues.
• Maintain accurate incident records, investigation notes, and response activities to support compliance and audit requirements.
• Contribute to the continuous improvement of security monitoring capabilities, detection use cases, playbooks, and response processes.
• Stay up to date with emerging cyber threats, vulnerabilities, attacker tactics, techniques and procedures (TTPs), and industry best practices.