Security Operations Centre Analyst

Shared Services Connected Ltd; Farnborough; On-site; GBP 49,000 - 58,000; Full time

Job summary

A Defence sector company is seeking L1 SOC Analysts to join their team in Farnborough. You will monitor and analyze security alerts, manage incidents, and support enterprise clients. Applicants should have experience in a Security Operations Centre and knowledge of technologies like Microsoft Sentinel and Splunk. The position is office-based, requires DV Clearance eligibility, and offers a salary up to £58K depending on experience. Benefits include annual leave and health plans.

Benefits

25 days annual leave with the option to buy additional days

Health cash plan

Life assurance

Pension

Generous flexible benefits fund

Qualifications

• Experience demonstrated in Security Operations Centre.
• Basic knowledge of client-server applications, multi-tier web applications, relational databases, firewalls, VPNs, and enterprise AntiVirus products.
• CREST Practitioner Intrusion Analyst / Blue Teams Level 1 or similar SOC related certifications.

Responsibilities

• Monitor, analyse security alerts and events, conduct initial investigations.
• Raise complex incidents to Senior Analysts.
• Manage SOC Incident queues.
• Prepare reports for managed clients.
• Collaborate on improving detection rules and use cases aligned with Mitre Att&ck.

Skills

Experience in Security Operations Centre

Experience using Microsoft Sentinel

Experience using Splunk

Knowledge of Mitre Att&ck Framework

Basic knowledge of client-server applications

Understanding of networking principles

Entry-level cyber security certification such as CompTIA Security+

Education

Completed an academic module in cyber security or a related subject

Tools

Microsoft Sentinel

Splunk

Job description

We are constantly growing our SOC team and new opportunities in our Farnborough site.

Come and join us in the Defence sector and support enterprise scale clients. We have opportunities for L1 SOC Analysts to be a part of our success and work with multiple, high profile clients. You should showcase your proficiency in a busy Security Operations Center with a technology-oriented attitude and the capacity to assume control.

From a technical perspective we are using Microsoft Sentinel, Splunk and MISP Threat sharing so any knowledge of these technologies would be a substantial benefit.

Role based on site in our Farnborough office and is shift work. 2 x 6am to 6pm, 2 x 6pm to 6am, 4 days off.

You do need to be eligible for DV Clearance for this role, and cannot start until your clearance is through.

What you'll be doing:

• Monitor, analyse security alerts and events, conduct initial investigations, and determine the appropriate response.
• Raise complex incidents to Senior Analysts.
• Manage SOC Incident queues.
• Support the maintenance of monitored asset baselines of the customer environments.
• Prepare reports for managed clients to both technical and non-technical audiences,
• Collaborate on improving detection rules and use cases aligned with Mitre Att&ck and threat-informed defense.
• Participate in a team effort to guarantee that corporate data and technology platform components are shielded from known threats.
• Collaborate with team members to maintain and update security incident documentation, including incident reports, analysis findings, and recommended mitigation strategies.
• Aid the development and use of threat intelligence throughout the service.
• Ability to work shifts from our office in Farnborough.

What you’ll bring:

• Experience demonstrated in Security Operations Centre.
• Experience using Microsoft Sentinel and Splunk.
• Knowledge and experience with Mitre Att&ck Framework.
• Basic knowledge of client-server applications, multi-tier web applications, relational databases, firewalls, VPNs, and enterprise AntiVirus products.
• Understanding of networking principles including TCP / IP, WANs, LANs and commonly used Internet protocols such as SMTP, HTTP, FTP, POP, LDAP.
• Entry level cyber security certification ( CompTIA Security+, CEH, CPSA).
• CREST Practitioner Intrusion Analyst / Blue Teams Level 1 or other SOC related certifications.
• Completed an academic module in cyber security or a related subject

It would be great if you had:

• Programming and scripting such as Python, Perl, Bash, PowerShell, C++.
• CREST Practitioner Intrusion Analyst / Blue Teams Level 1 or other SOC related certifications.
• Experience with SIEM technologies, namely Sentinel and Splunk, with some experience with QRadar.

If you are interested in this role but not sure if your skills and experience are exactly what we’re looking for, please do apply, we’d love to hear from you!

Employment Type

Permanent

Location

Office based in Farnborough

Security Clearance Level

Eligible for DV Clearance

Internal Recruiter

Jane

Salary

To £58K Depending on experience, plus on shift allowance.

Benefits

25 days annual leave with the choice to buy additional days, health cash plan, life assurance, pension, and generous flexible benefits fund.