Security Operations Center Analyst

Resillion; Birmingham; Hybrid; GBP 40.000 - 60.000; Vollzeit

Benefits dieser Stelle

Flexible hybrid working options

Career development support

Certification support

Zusammenfassung

Resillion, a global provider of digital assurance, cybersecurity and testing services, seeks a Security Operations Center Analyst to join our growing team in the UK. You will monitor security events using SIEM, tune rules, and investigate incidents across Windows, Linux and cloud environments.

The role demands strong networking knowledge, vulnerability and malware management experience, and effective communication to coordinate with clients and internal teams.

Qualifikationen

• Security monitoring experience with SIEM technologies; Microsoft Sentinel preferred.
• Tuning SIEM environments and creating monitoring rules.
• Strong networking knowledge: TCP/IP, WANs, LANs, and common protocols.
• Strong Windows, Linux and cloud technologies understanding.
• Knowledge of security solutions: SIEMs, proxies, AV, firewalls, VPNs, auth, encryption, IPS/IDS.
• Experience in security incident, malware, and vulnerability management processes.
• Attention to detail and quality.
• MSSP experience and good communication skills.
• Comfortable with rotational shifts.

Aufgaben

• Analyse security incidents to identify root causes.
• Investigate, document and report information security issues and trends.
• Analyse Threat Intelligence sources for proactive threat identification.
• Evaluate security of monitored infrastructure and recommend additional solutions.
• Improve internal incident response processes.
• Assist with Playbooks and Runbooks maintenance.
• Suggest improvements to SOC processes, procedures and policies.
• Provide vulnerability management via scanning tools.
• Collaborate with other analysts and teams.
• Assist with reporting and documentation as needed.

Kenntnisse

Security monitoring

SIEM

Microsoft Sentinel

Networking fundamentals

Windows

Linux

Cloud technologies

Incident management

Vulnerability management

Communication skills

Shift work

Tools

Microsoft Sentinel

CrowdStrike Falcon

KQL

Jobbeschreibung

Resillion is a global provider of digital assurance, cybersecurity, and testing services. We help organisations strengthen their security posture, protect critical assets, and deliver high-quality digital solutions. Our teams operate across multiple specialist disciplines, including Digital Forensics, Incident Response, SOC Operations, Quality & Compliance, and Technical Consultancy. We are committed to excellence, continuous improvement, and delivering trusted, customer-focused services that meet the highest professional and accreditation standards.

Key Responsibilities

• Analyse security incidents to identify the root cause.
• Investigate, document, and report on information security issues and emerging trends.
• Analyse Threat Intelligence sources for proactive identification of emerging threats.
• Participate in evaluating the security of monitored infrastructure systems and take part in recommending additional security solutions where appropriate.
• Participate in improving internal incident response processes.
• Assist with the creation and maintenance of Playbooks and Runbooks.
• Recommend enhancements to SOC security process, procedures, and policies.
• Provide vulnerability management and monitoring service to customers through vulnerability scanning tools.
• Integrate and share information with other analysts and other teams.
• Assist with reporting and documentation work as needed.

Required Skills and Qualifications

• Security monitoring experience with one or more SIEM technologies, preference is Microsoft Sentinel.
• Tuning of SIEM environment and creation of additional monitoring rules.
• Strong understanding of networking principles including TCP/IP, WANs, LANs, and commonly used Internet protocols.
• Strong understanding of Windows, Linux and cloud technologies.
• Good understanding of security solutions including SIEMs, Web Proxies, Anti-Virus, Firewalls, VPN, authentication providers and mechanisms, encryption, IPS/IDS.
• Good understanding of security incident management, malware management and vulnerability management processes.
• Attention to detail and quality.
• Should have MSSP experience along with strong communication skills.
• Comfortable working in rotational shifts.

Desirable Skills and Qualifications

• AZ-500 Microsoft Azure Security Technologies and/or SC-200 Microsoft Security Operations Analyst.
• Knowledge of Microsoft Kusto Query Language (KQL).
• Knowledge of CrowdStrike Falcon.
• Prior experience with handling or managing Cyber Incident Response (NIST).
• Familiarity with ITIL practices regarding incident, problem and change management.

Why Join Resillion?

• Opportunity to work within a growing and highly skilled Security Operations team.
• Exposure to a wide range of customer environments and security technologies.
• Career development and certification support.
• Collaborative and supportive working environment.
• Flexible hybrid working options.
• Opportunity to help organisations protect themselves against evolving cyber threats.