Senior SOC Analyst

TN United Kingdom; West Yorkshire; On-site; GBP 40,000 - 70,000; Full time

Job summary

An established industry player in the Aerospace & Defence sector is on the lookout for a skilled SOC Analyst to enhance the operations of their Security Operations Centre. This exciting role involves monitoring network traffic, investigating security incidents, and applying threat intelligence to safeguard critical national infrastructure. The ideal candidate will have a solid foundation in security architecture and experience with tools like Splunk and Sentinel. Join this dynamic team to contribute to the continuous improvement of cybersecurity measures and make a significant impact in a high-stakes environment.

Qualifications

• Basic Python and scripting skills required.
• Experience with security tools like Splunk and Sentinel is essential.

Responsibilities

• Monitor and analyze alerts to identify cyber-attacks.
• Create workflows for automation into SOAR tools.

Skills

Python

Scripting

Windows

OS X

Linux

Security Architecture

Threat Intelligence

Network Traffic Analysis

Incident Investigation

AWS

Azure

Tools

Splunk

Sentinel

Job description

Social network you want to login/join with:

Job Title: SOC Analyst

A global leader in the Aerospace & Defence sector is seeking a technically skilled SOC Analyst to support the daily operations and continuous improvement of a dedicated Security Operations Centre (SOC) for a major UK CNI organisation based in Leeds.

The successful candidate will be required to undergo governmental clearance.

Responsibilities:

1. Prepare and deliver shift handover briefs.
2. Monitor, triage, analyze, and investigate alerts, log data, and network traffic using the Protective Monitoring platform and internet resources to identify cyber-attacks and security incidents.
3. Write high-quality security incident tickets, utilizing existing knowledge resources and independent research.
4. Understand and apply Threat Intelligence in an operational environment.
5. Create workflows for automation into SOAR tools for common attack types.
6. Continuously improve the service, review use cases, and propose changes based on evolving threats.

Qualifications and Skills:

• Basic Python and/or scripting skills; familiarity with Windows, OS X, and Linux.
• Experience with Splunk and Sentinel.
• Experience working with various security tools and technologies.
• Strong understanding of security architecture, especially networking.
• Detailed knowledge of threat intelligence, threat actors, TTPs, and operationalizing threat intelligence.
• Experience investigating complex network intrusions, including state-sponsored groups and targeted ransomware attacks.
• Understanding of TCP/IP layers to identify normal and abnormal traffic.
• Knowledge of AWS and/or Azure cloud services.
• Content development experience with Splunk (with ES) and/or Sentinel is desirable.

If interested in this long-term contract opportunity, please email your CV and contact number to arrange a call.