Security Operations Center Analyst

Jumar; Stevenage; On-site; GBP 60,000 - 80,000; Full time

Job summary

An established industry player is on the lookout for a dedicated SOC Analyst to join their dynamic Security Operations Centre in Stevenage. This role offers a unique opportunity to engage in a fast-paced environment, where you will monitor, detect, and respond to cybersecurity incidents using advanced security tools. Ideal candidates will possess hands-on experience with technologies such as LogRhythm and Splunk, alongside a solid understanding of network protocols. If you are eager to advance your cybersecurity career and thrive in a collaborative setting, this position could be your next great challenge.

Qualifications

• Hands-on experience with security tools like LogRhythm and Splunk is essential.
• Strong understanding of network protocols and incident response techniques.

Responsibilities

• Monitor and respond to cybersecurity incidents in a 24/7 environment.
• Investigate and document security alerts for stakeholders.

Skills

Incident Response

Log Analysis

Packet Capture (PCAP) Analysis

Communication Skills

Cybersecurity Risk Assessment

Scripting (Python, PowerShell)

Tools

LogRhythm

Splunk

Darktrace (Threat Visualizer)

FireEye

ObserveIT

IronPort

Splunk Phantom

Recorded Future

Job description

Direct message the job poster from Jumar

Technology and Digital Recruitment Specialist within the Public Sector

Job Title: SOC Analyst

Shift Pattern: 24/7 Desk, 4 on 4 off – Days & Nights

Clearance Requirements:

• Ideally SC/DV Cleared – Must be eligible for clearance

Role Overview

We are seeking a motivated SOC Analyst to join our team in Stevenage, working full-time onsite in a dynamic 24/7 Security Operations Centre environment. This role involves monitoring, detecting, analyzing, and responding to cybersecurity incidents using a wide range of security tools and platforms.

Key Requirements

• Hands-on experience with LogRhythm, Splunk, Darktrace (Threat Visualizer), and FireEye technologies (EX, NX, HX, CMS).
• Solid understanding of the OSI Reference Model and key network communication protocols such as DNS, HTTP/S, SSL, SMTP, FTP/S, LDAP/S.
• Practical experience in incident response, log analysis, and packet capture (PCAP) analysis.
• Familiarity with attack vectors including phishing, port scanning, web application attacks, DDoS, and lateral movement techniques.
• Working knowledge of Windows and/or Linux operating systems, including how to identify indicators of compromise.
• Proven ability to investigate and document security alerts and incidents in a clear and concise manner for both technical and non-technical stakeholders.
• Capable of tracking and managing complex remediation activities, delivering clear updates to customers.
• Able to articulate cybersecurity risks in the context of business impact and recommend appropriate remedial actions.
• Collaborative mindset, with experience in team-based environments and stakeholder reporting.
• Prior experience handling security incidents on behalf of customers or internal teams.
• Familiarity with defensive cyber methodologies and frameworks.
• Foundational scripting knowledge (e.g., Python, PowerShell) is advantageous.
• Strong verbal and written communication skills are essential.
• Knowledge or exposure to tools such as:
• ObserveIT
• IronPort
• Splunk Phantom
• Recorded Future

This is an excellent opportunity to grow your cybersecurity career in a hands-on, fast-paced environment. If you meet the criteria and are looking for your next challenge, we’d love to hear from you.

Seniority level

• Mid-Senior level

Employment type

• Contract

Job function

• Information Technology