SOC Analyst

Resillion; Birmingham; Hybrid; GBP 35,000 - 52,000; Full time

Job summary

Resillion in Birmingham is seeking a SOC Analyst with 1–3 years of experience to join a hybrid/remote team. You will monitor security events, investigate incidents, and contribute to playbooks and vulnerability management. The role requires strong SIEM skills and good communication.

We offer a flexible hybrid working arrangement, exposure to diverse client environments, and opportunities for certification and career development within a growing cybersecurity practice.

Qualifications

• Experience monitoring security events with SIEMs, preferably Microsoft Sentinel.
• Proficient in TCP/IP, WANs, LANs, and common Internet protocols.
• Strong knowledge of Windows, Linux, and cloud technologies.
• Familiar with security solutions including SIEMs, Web Proxies, Anti-Virus, Firewalls, VPN, and encryption.
• Experience in incident management, malware handling and vulnerability processes.
• MSSP experience and good communication skills.
• Willingness to work in rotational shifts.

Responsibilities

• Analyse security incidents to identify root causes.
• Investigate, document, and report on information security issues and trends.
• Analyse Threat Intelligence sources to identify emerging threats.
• Evaluate security of monitored infrastructure and recommend additional security measures.
• Improve internal incident response processes.
• Assist with creation and maintenance of Playbooks and Runbooks.
• Recommend enhancements to SOC processes, procedures, and policies.
• Provide vulnerability management and monitoring services to customers via scanning tools.
• Collaborate with other analysts and teams; assist with reporting.

Skills

SIEM experience

Networking basics

Windows

Linux

Cloud technologies

Security incident management

Vulnerability management

MSSP experience

Communication skills

Tools

Microsoft Sentinel

Job description

Role: SOC Analyst

Location: Birmingham (Hybrid/Remote)

Experience: 1-3 Years

Shift Pattern: Rotational Shifts

About Resillion

Resillion is a global provider of digital assurance, cybersecurity, and testing services. We help organisations strengthen their security posture, protect critical assets, and deliver high-quality digital solutions. Our teams operate across multiple specialist disciplines, including Digital Forensics, Incident Response, SOC Operations, Quality & Compliance, and Technical Consultancy. We are committed to excellence, continuous improvement, and delivering trusted, customer-focused services that meet the highest professional and accreditation standards.

Key Responsibilities

• Analyse security incidents to identify the root cause.
• Investigate, document, and report on information security issues and emerging trends.
• Analyse Threat Intelligence sources for proactive identification of emerging threats.
• Participate in evaluating the security of monitored infrastructure systems and take part in recommending additional security solutions where appropriate.
• Participate in improving internal incident response processes.
• Assist with the creation and maintenance of Playbooks and Runbooks.
• Recommend enhancements to SOC security process, procedures, and policies.
• Provide vulnerability management and monitoring service to customers through vulnerability scanning tools.
• Integrate and share information with other analysts and other teams.
• Assist with reporting and documentation work as needed.

Required Skills and Qualifications

• Security monitoring experience with one or more SIEM technologies, preference is Microsoft Sentinel.
• Tuning of SIEM environment and creation of additional monitoring rules.
• Strong understanding of networking principles including TCP/IP, WANs, LANs, and commonly used Internet protocols.
• Strong understanding of Windows, Linux and cloud technologies.
• Good understanding of security solutions including SIEMs, Web Proxies, Anti-Virus, Firewalls, VPN, authentication providers and mechanisms, encryption, IPS/IDS.
• Good understanding of security incident management, malware management and vulnerability management processes.
• Attention to detail and quality.
• Should have MSSP experience along with strong communication skills.
• Comfortable working in rotational shifts.

Desirable Skills and Qualifications

• AZ-500 Microsoft Azure Security Technologies and/or SC-200 Microsoft Security Operations Analyst.
• Knowledge of Microsoft Kusto Query Language (KQL).
• Knowledge of CrowdStrike Falcon.
• Prior experience with handling or managing Cyber Incident Response (NIST).
• Familiarity with ITIL practices regarding incident, problem and change management.

Why Join Resillion?

• Opportunity to work within a growing and highly skilled Security Operations team.
• Exposure to a wide range of customer environments and security technologies.
• Career development and certification support.
• Collaborative and supportive working environment.
• Flexible hybrid working options.
• Opportunity to help organisations protect themselves against evolving cyber threats.