Security Operations Centre Analyst

Royal London; Glasgow; Hybrid; GBP 40,000 - 65,000; Full time

Benefits offered by this job

28 days annual leave

Pension scheme

Private medical insurance

Job summary

Royal London is seeking a SOC Analyst to join our security operations team. You will monitor alerts, investigate phishing activity, and support incident response while proactively hunting for threats across cloud and on‑prem environments.

You will collaborate with Threat Intelligence and Cyber Defence specialists to develop detections, playbooks, and security controls, contributing to continuous improvements and monthly MI reporting.

Qualifications

• Experience in IT or security-based roles.
• Strong interest in cybersecurity, incident response, threat detection and protecting organisations from cyber threats.
• Understanding of cybersecurity frameworks such as MITRE ATT&CK, NIST, Lockheed Martin Cyber Kill-chain.
• Analytical mindset to investigate, interpret and respond to security events.
• Experience using security tools including SIEM, EDR, SOAR.
• Knowledge of threat hunting, detection engineering, vulnerability management & threat intelligence.
• Excellent communication and collaboration across teams.
• Proactive, collaborative approach with a willingness to learn and develop technical skills.
• Strong documentation discipline, attention to quality, accuracy, and detail.
• Continuous improvement mindset.
• Security certifications desirable (e.g., CYSA+, Sec+, Security BlueTeam Level 1, HTB CDSA, TryHackMe SAL1).

Responsibilities

• Monitor and investigate security alerts & phishing attacks across the organisation.
• Support the response to cybersecurity incidents, helping to contain threats and support recovery activities.
• Proactively threat hunt for suspicious activity and emerging threats across the organisation.
• Work closely with Security & Threat Intelligence teams to strengthen detection and monitoring capabilities.
• Contribute to development of new detection use cases, playbooks and security controls.
• Be involved in improving ways of working on a continuous basis.
• Support the creation of monthly MI packs.

Skills

Threat hunting

Detection engineering

Vulnerability management

Threat intelligence

MITRE ATT&CK

NIST

Kill chain

Analytical mindset

Communication

Collaboration

Documentation

Tools

SIEM

EDR

SOAR

Job description

Contract type: Permanent
Location: Alderley Park, Glasgow

Working style: Hybrid 50% home/office based
Closing date: 28th September 2026

Are you passionate about cybersecurity and keen to build a career at the frontline of cyber defence? Join Royal London as a SOC Analyst, where you'll play a key role in protecting the organisation from emerging cyber threats and security incidents.

Working within our security operations team, you'll investigate security events, monitor potential threats, support incident response activities, proactively hunt for risks across our technology estate and use those to build and maintain detections. You'll gain hands‑on experience with industry-leading security tools, collaborate with Threat Intelligence and Cyber Defence specialists, and help strengthen our security monitoring and detection capabilities. Your responsibilities will include security event investigation, phishing, threat hunting and the development of new detection use cases and security improvements.

This is an excellent opportunity for someone looking to develop a career in Security Operations, gaining exposure to a diverse environment including cloud and on‑premises environments while working in a collaborative team focused on keeping Royal London and its customers safe from cyber threats.

About the role

• Monitor and investigate security alerts & phishing attacks across the organisation.
• Support the response to cybersecurity incidents, helping to contain threats and support recovery activities.
• Proactively threat hunt for suspicious activity and emerging threats across the organisation.
• Work closely with other Security & Threat Intelligence teams to strengthen threat detection and security monitoring capabilities.
• Contribute to the development of new detection use cases, playbooks and security controls that enhance our cyber resilience.
• Be involved in improving the ways of working on a continuous basis.
• Support the creation of monthly MI packs.

About you

• Experience in IT or security-based roles.
• A strong interest in cybersecurity, security incident response, threat detection and protecting organisations from cyber threats.
• An understanding for cybersecurity frameworks such as MITRE ATT&CK, NIST, Lockheed Martin Cyber Kill-chain.
• An analytical mindset with the ability to investigate, interpret and respond to security events.
• Understanding and experience using security tools including SIEM, EDR, SOAR platforms.
• Knowledge of cyber security concepts such as threat hunting, detection engineering, vulnerability management & threat intelligence.
• Excellent communication and collaboration skills, with the ability to work effectively across wider business teams.
• A proactive, collaborative approach with a willingness to learn and continuously develop your technical skills.
• Strong documentation discipline, with attention to quality, accuracy, and detail.
• Continuous improvement mindset, with a focus on improving ways of working.
• Security certifications such as CYSA+, Sec+, Security BlueTeam Level 1, HTB CDSA, TryHackMe SAL1 or equivalent desirable.

If you feel you'd be a great fit for Royal London but don't meet every requirement, we'd still love to hear from you. Research shows some candidates are less likely to apply unless they meet 100% of the criteria - if you meet most requirements and are keen to learn, we encourage you to apply.

About Royal London

We're the UK's largest mutual life, pensions and investment company, offering protection, long-term savings and asset management products and services.

Our People Promise to our colleagues is that we will all work somewhere inclusive, responsible, enjoyable and fulfilling. This is underpinned by our Spirit of Royal London values; Empowered, Trustworthy, Collaborate, Achieve.

We've always been proud to reward employees by offering great workplace benefits such as 28 days annual leave in addition to bank holidays, an up to 14% employer matching pension scheme and private medical insurance.

Inclusion, diversity and belonging

We're an inclusive employer. We celebrate and value different backgrounds and cultures across Royal London. Our diverse people and perspectives give us a range of skills which are recognised and respected - whatever their background.