Senior SOC Analyst

Sopra Steria - UK; Hemel Hempstead; On-site; GBP 35,000 - 65,000; Full time

Job summary

Join a rapidly growing team as a SOC Analyst in a dynamic Cyber practice focused on Aerospace Defence and Security. This role offers the chance to work with high-profile clients, utilizing cutting-edge technologies such as Microsoft Sentinel and Splunk. You'll be at the forefront of security operations, monitoring and investigating incidents, and contributing to team knowledge. With great career progression opportunities and a flexible benefits package, this position is ideal for those passionate about cybersecurity. If you're ready to take on challenges and lead from the front, we want to hear from you!

Benefits

Flexible Benefits

Training and Development Opportunities

Referral Bonus of £1500

Qualifications

• Proven experience in a busy SOC with a tech-first approach.
• Knowledge of Microsoft Sentinel and Splunk is beneficial.

Responsibilities

• Monitor and investigate security incidents on client infrastructure.
• Conduct in-depth analysis of logs to identify security threats.
• Prepare reports for clients and improve documentation.

Skills

Security Operations Centre Experience

Incident Response

Network Traffic Analysis

Microsoft Sentinel

Splunk

Mitre Att&ck Framework Knowledge

Understanding of Networking Principles

Education

Relevant Cybersecurity Certifications

Tools

Microsoft Sentinel

Splunk

MISP Threat Sharing

Job description

We are rapidly growing our SOC team and our roles offer serious career growth and very exciting work with multiple, high profile clients!

SOC Analysts come and join our growing Cyber practice in the Aerospace Defence and Security sector. This growing team supports enterprise scale clients. This role will require you to have proven experience working in a busy SOC with a tech-first approach.

The team that you will be joining is on the cusp of continued growth, so we are looking for you to lead from the front. From a technical perspective, we are using Microsoft Sentinel, Splunk, and MISP Threat sharing, so any knowledge of these technologies would be a substantial benefit.

This role is based out of our head office in Hemel Hempstead and will work on a shift pattern with 12 hour shifts (Nights and Days): 2 x 6am to 6PM, 2 x 6PM to 6AM, and 4 days off.

You do need to be eligible for Developed Vetting (DV).

We can offer great career progression opportunities, benefits which you can flex to meet your needs, and training and development opportunities.

What you'll be doing:

• Monitor, triage, and investigate security incidents on critical client infrastructure.
• In-depth analysis of network traffic, logs, and system events to identify potential security threats and vulnerabilities.
• Provide Incident Response support.
• Maintain, improve, and develop team knowledge of SOC tools, security operations, and triage.
• Prepare reports for managed clients for both technical and non-technical audiences and continuously improve their content and presentation.
• Maintain and update security incident documentation, including incident reports, analysis findings, and recommended mitigation strategies.

What you’ll bring:

• Experience in a Security Operations Centre.
• Demonstrable experience of managing Microsoft Sentinel and Splunk implementations.
• Knowledge and experience with the Mitre Att&ck Framework.
• Solid grasp of client-server applications, multi-tier web applications, relational databases, firewalls, VPNs, and enterprise AntiVirus products.
• Deep technical knowledge in the analysis of log data and intrusion detection systems.
• Solid understanding of networking principles including TCP/IP, WANs, LANs, and commonly used Internet protocols such as SMTP, HTTP, FTP, POP, and LDAP.

If you are interested in this role but not sure if your skills and experience are exactly what we’re looking for, please do apply; we’d love to hear from you!

Clearance Required: Eligible for DV Clearance

Referral Bonus: £1500.00