Security Operations Center Analyst

ZipRecruiter; Stevenage; On-site; GBP 40,000 - 70,000; Full time

Job summary

An established industry player is seeking a motivated SOC Analyst to join their dynamic Security Operations Centre in Stevenage. This full-time role offers an exciting opportunity to monitor, detect, and respond to cybersecurity incidents using advanced security tools. The ideal candidate will have hands-on experience with technologies like LogRhythm and Splunk, alongside a solid understanding of network protocols. With a collaborative mindset, you'll work in a fast-paced environment, articulating cybersecurity risks and managing complex remediation activities. If you're passionate about cybersecurity and ready for your next challenge, this role is perfect for you.

Qualifications

• Hands-on experience with security tools like LogRhythm and Splunk.
• Solid understanding of OSI Model and network protocols.

Responsibilities

• Monitor and respond to cybersecurity incidents in a 24/7 environment.
• Investigate and document security alerts for stakeholders.

Skills

LogRhythm

Splunk

Darktrace

FireEye

Incident Response

Log Analysis

Packet Capture Analysis

Windows Operating Systems

Linux Operating Systems

Scripting (Python, PowerShell)

Tools

ObserveIT

Symantec MessageLabs

IronPort

Splunk Phantom

Recorded Future

Job description

Job Description

Job Title: SOC Analyst

Location: Stevenage – Full-time onsite

Shift Pattern: 24/7 Desk, 4 on 4 off – Days & Nights

Clearance Requirements:

• Ideally SC/DV Cleared – Must be eligible for clearance

Role Overview

We are seeking a motivated SOC Analyst to join our team in Stevenage, working full-time onsite in a dynamic 24/7 Security Operations Centre environment. This role involves monitoring, detecting, analyzing, and responding to cybersecurity incidents using a wide range of security tools and platforms.

Key Requirements

• Hands-on experience with LogRhythm, Splunk, Darktrace (Threat Visualizer), and FireEye technologies (EX, NX, HX, CMS).
• Solid understanding of the OSI Reference Model and key network communication protocols such as DNS, HTTP/S, SSL, SMTP, FTP/S, LDAP/S.
• Practical experience in incident response, log analysis, and packet capture (PCAP) analysis.
• Familiarity with attack vectors including phishing, port scanning, web application attacks, DDoS, and lateral movement techniques.
• Working knowledge of Windows and/or Linux operating systems, including how to identify indicators of compromise.
• Proven ability to investigate and document security alerts and incidents in a clear and concise manner for both technical and non-technical stakeholders.
• Capable of tracking and managing complex remediation activities, delivering clear updates to customers.
• Able to articulate cybersecurity risks in the context of business impact and recommend appropriate remedial actions.
• Collaborative mindset, with experience in team-based environments and stakeholder reporting.
• Prior experience handling security incidents on behalf of customers or internal teams.
• Familiarity with defensive cyber methodologies and frameworks.
• Foundational scripting knowledge (e.g., Python, PowerShell) is advantageous.
• Strong verbal and written communication skills are essential.

Desirable Skills

• Knowledge or exposure to tools such as:
• ObserveIT
• Symantec MessageLabs
• IronPort
• Splunk Phantom
• Recorded Future

• This is an excellent opportunity to grow your cybersecurity career in a hands-on, fast-paced environment. If you meet the criteria and are looking for your next challenge, we’d love to hear from you