Security Operations Center Analyst

JR United Kingdom; Stevenage; On-site; GBP 40,000 - 70,000; Full time

Job summary

An established industry player is seeking a motivated SOC Analyst to join their dynamic team in Stevenage. This full-time role involves working in a fast-paced 24/7 Security Operations Centre, where you'll monitor, detect, analyze, and respond to cybersecurity incidents using advanced security tools. Ideal candidates will have hands-on experience with technologies like LogRhythm and Splunk, a solid understanding of network protocols, and strong communication skills. This is an excellent opportunity to advance your cybersecurity career in a collaborative environment, making a real impact on security operations.

Qualifications

• Experience in incident response and log analysis is crucial.
• Familiarity with cybersecurity tools and methodologies is essential.

Responsibilities

• Monitor and respond to cybersecurity incidents in a 24/7 environment.
• Analyze and document security alerts for stakeholders.

Skills

LogRhythm

Splunk

Darktrace (Threat Visualizer)

FireEye

Incident response

Log analysis

Packet capture (PCAP) analysis

Windows operating systems

Linux operating systems

Verbal and written communication

Tools

ObserveIT

IronPort

Splunk Phantom

Recorded Future

Job description

Social network you want to login/join with:

Security Operations Center Analyst, Stevenage

col-narrow-left

Client:

Jumar

Location:

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

4

Posted:

05.05.2025

Expiry Date:

19.06.2025

col-wide

Job Description:

Job Title: SOC Analyst

Shift Pattern: 24/7 Desk, 4 on 4 off – Days & Nights

Clearance Requirements:

• Ideally SC/DV Cleared – Must be eligible for clearance

Role Overview

We are seeking a motivated SOC Analyst to join our team in Stevenage, working full-time onsite in a dynamic 24/7 Security Operations Centre environment. This role involves monitoring, detecting, analyzing, and responding to cybersecurity incidents using a wide range of security tools and platforms.

Key Requirements

• Hands-on experience with LogRhythm, Splunk, Darktrace (Threat Visualizer), and FireEye technologies (EX, NX, HX, CMS).
• Solid understanding of the OSI Reference Model and key network communication protocols such as DNS, HTTP/S, SSL, SMTP, FTP/S, LDAP/S.
• Practical experience in incident response, log analysis, and packet capture (PCAP) analysis.
• Familiarity with attack vectors including phishing, port scanning, web application attacks, DDoS, and lateral movement techniques.
• Working knowledge of Windows and/or Linux operating systems, including how to identify indicators of compromise.
• Proven ability to investigate and document security alerts and incidents in a clear and concise manner for both technical and non-technical stakeholders.
• Capable of tracking and managing complex remediation activities, delivering clear updates to customers.
• Able to articulate cybersecurity risks in the context of business impact and recommend appropriate remedial actions.
• Collaborative mindset, with experience in team-based environments and stakeholder reporting.
• Prior experience handling security incidents on behalf of customers or internal teams.
• Familiarity with defensive cyber methodologies and frameworks.
• Foundational scripting knowledge (e.g., Python, PowerShell) is advantageous.
• Strong verbal and written communication skills are essential.
• Knowledge or exposure to tools such as:
• ObserveIT
• IronPort
• Splunk Phantom
• Recorded Future

This is an excellent opportunity to grow your cybersecurity career in a hands-on, fast-paced environment. If you meet the criteria and are looking for your next challenge, we’d love to hear from you.