Senior SOC Analyst

Sopra Steria Ltd; Hemel Hempstead; On-site; GBP 40,000 - 55,000; Full time

Job summary

A leading technology firm is seeking an L2 SOC Analyst for their Hemel Hempstead office. The role involves monitoring and investigating security incidents, providing Incident Response support, and maintaining security documentation. Candidates should have experience with Microsoft Sentinel and Splunk, as well as a solid understanding of networking principles. The position offers 25 days of annual leave and flexible benefits, with clear opportunities for career progression. DV Clearance eligibility is required.

Benefits

25 days annual leave

Health cash plan

Life assurance

Pension

Generous flexible benefits fund

Qualifications

• Experience in Security Operations Centre.
• Demonstrable experience with managing Microsoft Sentinel or Splunk implementations.
• Deep technical knowledge in analysis of log data and intrusion detection systems.

Responsibilities

• Monitor, triage, and investigate security incidents on critical client infrastructure.
• Provide Incident Response support.
• Maintain and update security incident documentation.

Skills

Security Operations Centre experience

Microsoft Sentinel proficiency

Splunk experience

Mitre Att&ack Framework knowledge

Networking principles

Log data analysis

Tools

Microsoft Sentinel

Splunk

QRadar

Job description

What you will be doing:

• Monitor, triage, and investigate security incidents on critical client infrastructure.
• In-depth analysis of network traffic, logs, and system events to identify potential security threats and vulnerabilities.
• Provide Incident Response support.
• Maintain, improve and develop team knowledge of SOC tools, security operations and triage.
• Prepare reports for managed clients to both technical and non-technical audiences and continuously improve their content and presentation.
• Maintain and update security incident documentation, including incident reports, analysis findings, and recommended mitigation strategies.

What you will bring:

• Experience in Security Operations Centre.
• Demonstrable experience of Managing Microsoft Sentinel or Splunk implementations.
• Knowledge and experience with Mitre Att&ck Framework.
• Solid grasp of client-server applications, multi-tier web applications, relational databases, firewalls, VPNs, and enterprise AntiVirus products.
• Deep technical knowledge in the analysis of log data and intrusion detection systems.
• Solid understanding of networking principles including TCP/IP, WANs, LANs, and commonly used Internet protocols such as SMTP, HTTP, FTP, POP, LDAP.

It would be great if you had:

• Understanding of static malware analysis and reverse engineering.
• CREST Practitioner Intrusion Analyst.
• Experience with SIEM technologies, namely Sentinel and Splunk, with some experience with QRadar appreciated.

Employment Type:

Permanent

Location: Hemel Hempstead office based

Security Clearance Level: Eligible for DV Clearance

Internal Recruiter: Jane

Benefits: 25 days annual leave with the choice to buy additional days, health cash plan, life assurance, pension, and generous flexible benefits fund

Are you in a Security Operations Centre and every day is the same? We can assure you that there is no boredom in our role.

We have a growing Cyber practice in our Defence sector and support enterprise-scale clients. Now we have opportunities for L2 SOC Analysts to join in our success and work with multiple, high profile clients. You must have proven experience working in a busy SOC with a tech-first approach and be able to lead from the front.

From a technical perspective we are using Microsoft Sentinel, Splunk and MISP Threat sharing so any knowledge of these technologies would be a substantial benefit.

This role is based out of office in Hemel Hempstead and will work on a shift pattern with 12 hour shifts (Nights and Days).

You do need to be eligible for DV Clearance.

We can offer great career progression opportunities, benefits which you can flex to meet your needs and training and development opportunities.

If you are interested in this role but not sure if your skills and experience are exactly what we’re looking for, please do apply, we’d love to hear from you!

Sopra Steria’s Aerospace, Defence and Security business designs, develops and deploys digital solutions to Central Government clients. The work we do makes a real difference to the client’s goal of National Security, and we operate in a unique and privileged environment. We are given time for professional development activities, and we coach and mentor our colleagues, sharing knowledge and learning from each other. We foster a culture in which employees feel valued and supported and have pride in their work for the customer, delivering outstanding rates of customer satisfaction in the UK’s most complex safety- and security-critical markets.