Senior SOC Analyst

Network IT; Milton Keynes; On-site; GBP 83,000 - 124,000; Full time

Job summary

Network IT in Buckinghamshire is seeking a Senior SOC Analyst to lead security monitoring and incident investigations, ensuring high-quality alert handling and escalation. The role requires 12-hour shifts (7am–7pm & 7pm–7am) across a 4-week pattern, with hands-on SIEM monitoring and threat intelligence work to protect the organisation.

Applicants will analyse alerts, correlate data from multiple sources, document findings, and coach junior analysts while staying current with evolving cyber

Qualifications

• Experience in cyber security operations, incident management and response.
• Experience in SOC environments and investigating security events.
• Knowledge of SIEM platforms, log analysis and monitoring tools.
• Understanding of attack methodologies, indicators of compromise and threat intel.
• Ability to work in a shift-based 24/7 environment.

Responsibilities

• Monitor the organisation’s technology estate to identify cyber security events and indicators of compromise.
• Investigate security alerts and complex events, determining significance and actions.
• Correlate information from multiple data sources to establish attack timelines.
• Analyse indicators of compromise and attacker techniques to assess security events.
• Escalate incidents to Lead SOC Analyst or Incident Responder per procedures.
• Support Incident Responders with analytical findings and timelines.
• Contribute to improvements in monitoring capability and alert quality.
• Validate new monitoring content and detection rules before live deployment.
• Assist in onboarding new systems and cloud services into SOC monitoring.
• Maintain accurate investigations records and documentation.
• Share knowledge and mentor Practitioner SOC Analysts.
• Participate in post-incident reviews and lessons learned.
• Maintain awareness of emerging threats to improve effectiveness.

Job description

YOU MUST HAVE ACTIVE DV CLEARANCE

Senior SOC Analyst

£75 per hour

12 Hour shifts (7am-7pm & 7pm-7am)

7 Days & 7 Nights over a 4-week pattern

6 month contract initially

Buckinghamshire

Summary

The 4x Senior SOC Analysts will be responsible for the operational leadership of the Security Monitoring function, ensuring the consistent delivery of high-quality security monitoring, investigation and escalation activities.

Responsibilities

• Monitor theorganisation’stechnology estate toidentifycyber security events, suspicious activity and indicators of compromise using approved monitoring platforms and analytical tools.
• Independently investigate security alerts and complex cyber security events, determining their significance, potential impact and appropriate course of actions.
• Correlate information from multiple data sources toestablishattack timelines,identifyaffected systems and support the assessment of cyber security incidents.
• Analyseindicators of compromise, attacker techniques and available threat intelligence to determine the nature and severity of security events.
• Escalate indicators confirmed or suspected cyber security incidents to the Lead SOC Analyst or Incident Responder team in accordance with established operational procedures.
• Support Incident Responders by providing accurate analytical findings, supporting evidence, timelines and technical information throughout incident investigations.
• Contribute to the continual improvement of monitoring capability by identifying opportunities to improve alert quality, investigation processes, monitoring coverage and detection effectiveness.
• Validate new monitoring content, detection rules and operational procedures before deployment into the live SOC environment.
• Assist in the onboarding of new systems, cloud services and application into SOC monitoring by validating operational visibility and monitoring effectiveness.
• Maintain accurate investigations records, ensuring all analytical activities are fully documented in accordance with organisational procedures.
• Share knowledge, provide technical guidance and support the development of Practitioner SOC Analysts through coaching and day-to-day mentoring.
• Contribute to operational reviews, lessons identified and post-incident activities, recommending improvements to monitoring capability and operational processes.
• Maintain awareness of emerging cyber threats, attacker techniques and monitoring technologies to support continual professional development and improved operational effectiveness

Required Skills / Experience

• The Senior SOC Analyst should demonstrable knowledge and skills in the areas: Cyber security operations, Forensics, Incident management, incident investigation and response, Information risk assessment and risk management, Intrusion detection analysis, Protective security, Secure operations management, Threat intelligence and threat assessment
• Experience working within a SOC or comparable cyber security operations environment.
• Experience investigating cyber security alerts and security events using enterprise monitoring techniques.
• Good knowledge of SIEM platforms, security monitoring tools and log analysis techniques.
• Understanding of cyber attack methodologies, indicators or compromise, threat intelligence and common attacker techniques.
• Experience analysing information from multiple technical sources to investigate cyber security events.
• Experience supporting cyber incident response activities.
• Strong analytical and problem-solving skills with the ability to made sound technical judgements.
• Good written and verbal communication skills with the ability to produce accurate technical reports and investigation findings.
• Ability to work effectively within a shift-based 24/7 environment.
• Professional certifications such as Microsoft SC-200, CompTIA CySA+, GIAC, GCIA or equivalentDesirable:

Desirable

• Experience using Microsoft Sentinel, LogRhythm, or equivalent enterprise SIEM platforms.
• Experience developing monitoring improvements, detection tuning, or operational process development.
• Experience supporting Incident Responder activities during major cyber security incidents.
• Experience contributing to the development of monitoring use cases and detection improvements.
• Applied knowledge of MITRE ATT&CK or equivalent adversary behaviour frameworks