SOC Analyst

CBSbutler Ltd.; Hemel Hempstead; On-site; GBP 40,000 - 80,000; Full time

Job summary

Join a prestigious technology consultancy as a SOC Analyst, where you will play a vital role in national security. This position offers an exciting opportunity to monitor and respond to security incidents using cutting-edge technologies like Microsoft Sentinel and Splunk. You'll work in a dynamic environment, contributing to impactful projects that protect critical infrastructure. With a strong focus on career growth and a supportive culture, this role is perfect for motivated individuals looking to make a difference in the cybersecurity landscape.

Benefits

25 days annual leave

Health cash plan

Life assurance

Company pension scheme

Flexible benefits fund

Qualifications

• Proven experience in a SOC environment with strong technical skills.
• Demonstrable experience managing Microsoft Sentinel and Splunk.

Responsibilities

• Monitor and investigate security incidents impacting client infrastructure.
• Perform detailed analysis of network traffic and log sources.

Skills

Security Operations Centre (SOC) experience

Microsoft Sentinel

Splunk

Mitre ATT&CK Framework

Networking principles (TCP/IP, WANs, LANs)

Incident Response (IR)

Education

CREST Practitioner Intrusion Analyst (CPIA)

Tools

Microsoft Sentinel

Splunk

QRadar

Job description

SOC Analyst - Leading Technology Consultancy (Defence & Security Sector)

Location: Hemel Hempstead (On-site, Shift-Based)
Salary: Competitive Salary + Comprehensive Benefits
Security Clearance: Must be eligible for or hold current DV (Developed Vetting) Clearance

Are you a skilled SOC Analyst looking to join a rapidly growing Cyber Practice within a prestigious organisation focused on national security?

We are recruiting on behalf of a major technology consultancy, a leader in designing and deploying critical digital solutions for clients within the UK's Aerospace, Defence, and Security sectors. Their work is vital, operating within a unique and privileged environment where you can make a tangible difference.

Their Cyber team is expanding to support enterprise-scale clients and is seeking proactive, tech-focused SOC Analysts to join their ranks. This is an exciting time to join, as the team is poised for continued growth, offering significant opportunities to contribute and develop.

You'll be working with cutting-edge technologies like Microsoft Sentinel, Splunk, and MISP in a busy, dynamic environment.

What You'll Be Doing:

• Actively monitor, triage, and conduct in-depth investigations into security incidents impacting critical client infrastructure.
• Perform detailed analysis of network traffic, diverse log sources (system, application, network), and other security data to identify threats and vulnerabilities.
• Provide crucial Incident Response (IR) support during security events.
• Contribute to the continuous improvement of the team's knowledge regarding SOC tools, operational procedures, and effective triage techniques.
• Prepare clear and concise reports for managed clients, tailored for both technical and non-technical audiences, focusing on continuous improvement of content and delivery.
• Maintain meticulous security incident documentation, including incident reports, analysis findings, and recommended mitigation strategies.

What You'll Bring:

• Proven experience working within a Security Operations Centre (SOC) environment.
• Demonstrable experience of managing or working extensively with Microsoft Sentinel and Splunk implementations.
• Good knowledge and practical experience applying the Mitre ATT&CK Framework.
• Solid understanding of core IT infrastructure and security concepts: client-server applications, multi-tier web apps, databases, firewalls, VPNs, enterprise endpoint protection, etc.
• Deep technical knowledge related to the analysis of log data and intrusion detection systems (IDS).
• A strong grasp of networking principles: TCP/IP, WANs, LANs, and common internet protocols (e.g., SMTP, HTTP, FTP, LDAP).

It Would Be Great If You Also Had:

• An understanding of static malware analysis or reverse engineering concepts.
• Certifications such as CREST Practitioner Intrusion Analyst (CPIA) or similar relevant industry certs.
• Experience with additional SIEM technologies, particularly QRadar.

Key Details:

• Employment Type: Permanent
• Location: Based at the head office in Hemel Hempstead (Fully site-based).
• Work Pattern: Rotating 12-hour shifts: 2x Days (06:00-18:00), 2x Nights (18:00-06:00), followed by 4x Days Off.
• Security Clearance: Essential Requirement. You must be eligible to undergo and obtain UK DV (Developed Vetting) clearance, or already hold current DV clearance. Please confirm your eligibility status when applying.
• Salary: Competitive package, aligned with your skills and experience.
• Benefits: Includes 25 days annual leave (with option to buy more), health cash plan, life assurance, company pension scheme, and a generous flexible benefits fund.

Why This Opportunity?

• Impactful Work: Contribute directly to projects of national importance within a highly respected organisation.
• Career Growth: Excellent opportunities for career progression, supported by dedicated training and development initiatives.
• Leading Technology: Work with sought-after security tools like Sentinel and Splunk in a tech-first environment.
• Supportive Culture: Join a company that invests in its people, fosters collaboration, knowledge sharing, and offers coaching and mentoring.

Interested?

If you are a motivated SOC Analyst seeking a challenging and rewarding role within a growing team, we encourage you to apply. Even if you don't meet every single desirable criterion, but possess the core skills and the necessary DV eligibility, we'd love to hear from you!