Remote SOC Analyst (Splunk) – Threat Detection & Response

NCC Group plc; Manchester; Hybrid; GBP 45,000 - 65,000; Full time

Benefits offered by this job

Flexible Working

Holiday Entitlements

Medicash & Illness

Pension & Life Cover

Share Save Scheme

Volunteer Programs

Green Car Scheme

Cycle to Work

Time Off for Life Events

Family Planning Support

Job summary

NCC Group is seeking a proactive SOC Analyst to monitor, detect, investigate and respond to cyber threats using Splunk Enterprise Security in a remote UK setting. You will analyze alerts and incidents to strengthen defence capabilities and support security operations.

In this role you will perform threat detection, log analysis and incident response, escalate major incidents, and contribute to SIEM use cases and SOC playbooks while maintaining clear incident documentation.

Qualifications

• Experience in a SOC or cyber security operations role.
• Familiar with Splunk Enterprise Security and security monitoring tools.
• Understanding of network and endpoint security and attack techniques.
• Knowledge of incident response processes and threat intelligence.
• Certifications such as Security+ or Splunk Certified User are desirable.

Responsibilities

• Monitor security events and alerts via Splunk ES.
• Investigate and triage incidents per procedures.
• Perform threat detection, log analysis, and event correlation.
• Escalate significant incidents to senior analysts.
• Assist with threat hunting and remediation activities.
• Create and maintain incident documentation and reports.
• Contribute to SIEM use cases and SOC playbooks.

Skills

SOC experience

Threat intelligence

Incident response

Security fundamentals

Tools

Splunk Enterprise Security

Job description

NCC Group is seeking a proactive SOC Analyst to monitor, detect, investigate and respond to cyber threats using Splunk Enterprise Security in a remote UK setting. You will analyze alerts and incidents to strengthen defence capabilities and support security operations.

In this role you will perform threat detection, log analysis and incident response, escalate major incidents, and contribute to SIEM use cases and SOC playbooks while maintaining clear incident documentation.