SIOC Analyst: Threat Detection & DFIR

UBDS Digital; Manchester; On-site; GBP 40,000 - 60,000; Full time

Benefits offered by this job

Private medical cover

Discretionary bonus

20–25 days holiday

EV leasing

Pension scheme

Death in service cover

Job summary

UBDS Group is seeking a SIOC Analyst to join our Security and Infrastructure Operations Centre in Manchester. The role focuses on security monitoring, incident detection and response across Microsoft and AWS environments, with DFIR activities and ongoing improvements to detection use cases.

You will work on triaging alerts, conducting investigations, coordinating with cloud and infrastructure teams, and contributing to incident reports and playbooks in a hands-on, office-based setting.

Qualifications

• Experience in a SOC, SIOC or similar security operations environment.
• Experience monitoring, triaging and investigating security alerts and incidents.
• Hands-on experience using SIEM or security monitoring platforms.
• Experience with logs/telemetry from multiple sources and incident investigations.
• Understanding of incident response processes and DFIR concepts.

Responsibilities

• Monitor and investigate security alerts and events across customer environments.
• Triage alerts to determine severity and response actions.
• Investigate incidents across endpoints, cloud, networks and apps.
• Use SIEM and tooling to analyze logs and detect indicators of compromise.
• Support incident response from detection through containment and recovery.
• Conduct initial DFIR activities: evidence collection, log analysis, timelines.
• Identify phishing/malware and account compromise threats.
• Collaborate with customers, cloud engineers and security teams during investigations.
• Contribute to playbooks and detection rule improvements.
• Document investigations and outcomes clearly.
• Assist with post-incident reviews and threat-hunting activities.

Skills

SOC operations

Threat monitoring

SIEM usage

Incident response

DFIR basics

Microsoft Defender

AWS security

Log analysis

Endpoint security

Attack techniques

Communication skills

Tools

SIEM platforms

EDR tooling

Log analysis tools

Job description

UBDS Group is seeking a SIOC Analyst to join our Security and Infrastructure Operations Centre in Manchester. The role focuses on security monitoring, incident detection and response across Microsoft and AWS environments, with DFIR activities and ongoing improvements to detection use cases.

You will work on triaging alerts, conducting investigations, coordinating with cloud and infrastructure teams, and contributing to incident reports and playbooks in a hands-on, office-based setting.