Senior SOC Analyst

Shared Services Connected Ltd; Hemel Hempstead; On-site; GBP 100,000 - 125,000; Full time

Job summary

A tech services company is looking for a skilled security analyst to monitor and investigate security incidents. You will analyze network traffic and logs, support incident response efforts, and maintain security documentation. Experience with Microsoft Sentinel or Splunk and a strong grasp of networking principles are essential. The role is based in Hemel Hempstead or Farnborough, offering a permanent position with generous benefits including 25 days annual leave and a health cash plan.

Benefits

25 days annual leave with purchase option

Health cash plan

Life assurance

Pension

Flexible benefits fund

Qualifications

• Experience in Security Operations Centre.
• Demonstrable experience of managing Microsoft Sentinel or Splunk implementations.
• Knowledge and experience with Mitre Att&ck Framework.

Responsibilities

• Monitor, triage, and investigate security incidents.
• In-depth analysis of network traffic, logs, and system events.
• Provide Incident Response support.

Skills

Security Operations Centre experience

Managing Microsoft Sentinel or Splunk

Mitre Att&ck Framework knowledge

Client-server and multi-tier web applications

Log data and intrusion detection analysis

Networking principles knowledge

Tools

Microsoft Sentinel

Splunk

QRadar

Job description

What you will be doing

• Monitor, triage, and investigate security incidents on critical client infrastructure.
• In-depth analysis of network traffic, logs, and system events to identify potential security threats and vulnerabilities.
• Provide Incident Response support.
• Maintain, improve and develop team knowledge of SOC tools, security operations and triage.
• Prepare reports for managed clients to both technical and non-technical audiences and continuously improve their content and presentation.
• Maintain and update security incident documentation, including incident reports, analysis findings, and recommended mitigation strategies.

What you will bring

• Experience in Security Operations Centre.
• Demonstrable experience of Managing Microsoft Sentinel or Splunk implementations.
• Knowledge and experience with Mitre Att&ck Framework.
• Solid grasp of client-server applications, multi-tier web applications, relational databases, firewalls, VPNs, and enterprise AntiVirus products.
• Deep technical knowledge in the analysis of log data and intrusion detection systems.
• Solid understanding of networking principles including TCP / IP, WANs, LANs, and commonly used Internet protocols such as SMTP, HTTP, FTP, POP, LDAP.

It would be great if you had

• Understanding of static malware analysis and reverse engineering.
• CREST Practitioner Intrusion Analyst.
• Experience with SIEM technologies, namely Sentinel and Splunk, with some experience with QRadar appreciated.

If you are interested in this role but not sure if your skills and experience are exactly what we’re looking for, please do apply, we’d love to hear from you!

Employment Type: Permanent

Location: Hemel Hempstead OR Farnborough office based

Security Clearance Level: Eligible for DV Clearance

Internal Recruiter: Jane

Benefits: 25 days annual leave with the choice to buy additional days, health cash plan, life assurance, pension, and generous flexible benefits fund