SOC Analyst

CBSbutler Holdings Limited trading as CBSbutler; Hemel Hempstead; On-site; GBP 40,000 - 70,000; Full time

Job summary

Join a leading technology consultancy as a SOC Analyst, where you'll play a vital role in national security. This is an exciting opportunity to work with cutting-edge technologies like Microsoft Sentinel and Splunk in a dynamic environment. You'll be responsible for monitoring security incidents, conducting in-depth investigations, and contributing to the continuous improvement of SOC operations. With a focus on career growth and impactful work, this position offers a chance to make a tangible difference in a prestigious organization. If you're passionate about cybersecurity and ready for a rewarding challenge, we want to hear from you!

Benefits

25 days annual leave

Health cash plan

Life assurance

Company pension scheme

Flexible benefits fund

Qualifications

• Proven experience in a Security Operations Centre (SOC).
• Strong knowledge of log data analysis and intrusion detection systems.

Responsibilities

• Monitor and investigate security incidents impacting client infrastructure.
• Provide Incident Response support during security events.

Skills

SOC Operations

Incident Response

Microsoft Sentinel

Splunk

Mitre ATT&CK Framework

Networking Principles

Log Analysis

Education

Relevant Security Certifications

Tools

Microsoft Sentinel

Splunk

QRadar

Job description

SOC Analyst - Leading Technology Consultancy (Defence & Security Sector)

Location: Hemel Hempstead (On-site, Shift-Based)
Salary: Competitive Salary + Comprehensive Benefits
Security Clearance: Must be eligible for or hold current DV (Developed Vetting) Clearance

Are you a skilled SOC Analyst looking to join a rapidly growing Cyber Practice within a prestigious organisation focused on national security?

We are recruiting on behalf of a major technology consultancy, a leader in designing and deploying critical digital solutions for clients within the UK's Aerospace, Defence, and Security sectors. Their work is vital, operating within a unique and privileged environment where you can make a tangible difference.

Their Cyber team is expanding to support enterprise-scale clients and is seeking proactive, tech-focused SOC Analysts to join their ranks. This is an exciting time to join, as the team is poised for continued growth, offering significant opportunities to contribute and develop.

You'll be working with cutting-edge technologies like Microsoft Sentinel, Splunk, and MISP in a busy, dynamic environment.

What You'll Be Doing:

• Actively monitor, triage, and conduct in-depth investigations into security incidents impacting critical client infrastructure.
• Perform detailed analysis of network traffic, diverse log sources (system, application, network), and other security data to identify threats and vulnerabilities.
• Provide crucial Incident Response (IR) support during security events.
• Contribute to the continuous improvement of the team's knowledge regarding SOC tools, operational procedures, and effective triage techniques.
• Prepare clear and concise reports for managed clients, tailored for both technical and non-technical audiences, focusing on continuous improvement of content and delivery.
• Maintain meticulous security incident documentation, including incident reports, analysis findings, and recommended mitigation strategies.

What You'll Bring:

• Proven experience working within a Security Operations Centre (SOC) environment.
• Demonstrable experience of managing or working extensively with Microsoft Sentinel and Splunk implementations.
• Good knowledge and practical experience applying the Mitre ATT&CK Framework.
• Solid understanding of core IT infrastructure and security concepts: client-server applications, multi-tier web apps, databases, firewalls, VPNs, enterprise endpoint protection, etc.
• Deep technical knowledge related to the analysis of log data and intrusion detection systems (IDS).
• A strong grasp of networking principles: TCP/IP, WANs, LANs, and common internet protocols (e.g., SMTP, HTTP, FTP, LDAP).

It Would Be Great If You Also Had:

• An understanding of static malware analysis or reverse engineering concepts.
• Certifications such as CREST Practitioner Intrusion Analyst (CPIA) or similar relevant industry certs.
• Experience with additional SIEM technologies, particularly QRadar.

Key Details:

• Employment Type: Permanent
• Location: Based at the head office in Hemel Hempstead (Fully site-based).
• Work Pattern: Rotating 12-hour shifts: 2x Days (06:00-18:00), 2x Nights (18:00-06:00), followed by 4x Days Off.
• Security Clearance: Essential Requirement. You must be eligible to undergo and obtain UK DV (Developed Vetting) clearance, or already hold current DV clearance. Please confirm your eligibility status when applying.
• Salary: Competitive package, aligned with your skills and experience.
• Benefits: Includes 25 days annual leave (with option to buy more), health cash plan, life assurance, company pension scheme, and a generous flexible benefits fund.

Why This Opportunity?

• Impactful Work: Contribute directly to projects of national importance within a highly respected organisation.
• Career Growth: Excellent opportunities for career progression, supported by dedicated training and development initiatives.
• Leading Technology: Work with sought-after security tools like Sentinel and Splunk in a tech-first environment.
• Supportive Culture: Join a company that invests in its people, fosters collaboration, knowledge sharing, and offers coaching and mentoring.

Interested?

If you are a motivated SOC Analyst seeking a challenging and rewarding role within a growing team, we encourage you to apply. Even if you don't meet every single desirable criterion, but possess the core skills and the necessary DV eligibility, we'd love to hear from you!