SOC Analyst

NCC Group; Manchester; Hybrid; GBP 30,000 - 45,000; Full time

Job summary

A leading cybersecurity firm in the UK is seeking a SOC Analyst to monitor IDS, Firewalls, and SIEM platforms, providing crucial incident remediation documentation. Candidates should possess practical knowledge in security toolsets, as well as experience in analyzing security incidents. The role emphasizes teamwork, where you'll assist junior analysts and contribute to documentation improvements. The firm offers a supportive work environment and extensive benefits including flexible working and wellness programs.

Benefits

Flexible working

Financial & Investment benefits

Pension plan

Life Assurance

Maternity & Paternity leave

Community & Volunteering Programs

Cycle Scheme

Employee Referral Program

Lifestyle & Wellness initiatives

Learning & Development opportunities

Diversity & Inclusion efforts

Qualifications

• Practical knowledge of security and networking toolsets.
• Experience in analyzing common security incidents.
• Ability to handle high-pressure incidents calmly.

Responsibilities

• Monitor IDS, Firewalls, and SIEM platforms for threats.
• Provide incident remediation documentation.
• Act as an escalation point for junior team members.

Skills

Security and networking toolsets knowledge

Common network protocols

Windows and Linux OS knowledge

Calm under pressure

LogRhythm, ArcSight or Splunk experience

Education

Degree in related field

Tools

SIEM

IDS

Vulnerability Management

Availability Monitoring

Job description

SOC Analyst

Hybrid (Manchester, Cheltenham or London)

Role Purpose

Today, it is an unavoidable fact that your business-critical infrastructure and systems are at risk of attack. The key to good security is a clear understanding of what is most critical to the business. Where you do not have enough internal resources, time or skills to monitor and manage your IT environment 24/7, NCC Group can help, freeing up your skilled employees to focus on value-add activity. NCC Group provide a range of managed and hosted services delivered from our UK based Security Operations Centre SOC which operates 24/7, 365 days a year. Our team of over 30 accredited security experts are available 24/7, dealing daily with over 200 million log events and providing support for over 5,000 network devices. We are specialists in SIEM, our services backed by our EDGE methodology built up through dozens of major deployments and hundreds of use cases with many of the UK's largest companies. We are the UK's largest DDI service provider and the leading integrator for Carbon Black, Splunk, Log Rhythm, Defender ATP and Azure Sentinel in the UK. We provide a single point of contact for all of your managed security needs and can work with you to define and achieve your own individual security requirements. Our team of experts provide proactive monitoring and reporting, monitoring your equipment to ensure maximum availability and responding to calls to support change requests and helping diagnose system issues. Read more about the services offered by the NCC Group Security Operations Centre here: https://www.nccgroup.trust/uk/our-services/security-consulting/managed-and-hosted-security-services/

Summary

• Monitor global IDS, Network Intruder, Firewall, DDoS detection and mitigation, availability and SIEM platforms looking for potential threats, vulnerabilities and indicators of compromise.
• Provide Incident remediation and prevention documentation and recommendations to customers based on defined procedures and analyst experience.
• Document and conform to processes related to security monitoring procedures.
• Provide customer service that exceeds our customers' expectations at all times.
• Initiate escalation procedure to counteract potential threats, vulnerabilities and threat actors.
• Compilation and review of service focused reporting.
• Act as an escalation point for more junior members of the team, providing assistance and mentoring where necessary.
• Providing assistance to Senior SOC Analysts on Threat Hunting engagements.
• Contributing to the continuous improvement of SOC procedures and documentation.
• Perform other duties as assigned.

What we are looking for in you

Experience / Skills

• Practical knowledge of security and networking toolsets such as SIEM, IDS, Vulnerability Management, Availability Monitoring, packet capture and other threat detection technologies.
• Pre-existing, in-depth knowledge of common network protocols.
• Pre-existing, in-depth knowledge of Windows and Linux based operating systems.
• Experience in the extensive analysis of common security incidents.
• Ability to stay calm in highly sensitive and high-pressure incidents.
• Experience with LogRhythm, ArcSight or Splunk is desirable but not required.

Certifications

The following certifications are desirable, but not a requirement. Successful candidates that do not possess these certifications may be tasked with working towards them at the beginning of their employment:

• CREST CPSA / CRIA / CMRE / CNIA / CHIA
• CompTIA Security+
• CompTIA Network+
• Degree in related field.
• Other relevant certifications.

Ways of working

• Focusing on Clients and Customers.
• Working as One NCC.
• Always Learning.
• Being Inclusive and Respectful.
• Delivering Brilliantly.

Our company

At NCC Group, our mission is to create a more secure digital future. That mission underpins everything we do, from our work with our incredible clients to groundbreaking research shaping our industry. Our teams' partner with clients across a multitude of industries, delving into, securing new products, and emerging technologies, as well as solving complex security problems. As global leaders in cyber and escrow, NCC Group is a people-powered business seeking the next group of brilliant minds to join our ranks. Our colleagues are our greatest asset, and NCC Group is committed to providing an inclusive and supportive work environment that fosters creativity, collaboration, authenticity, and accountability. We want colleagues to put down roots at NCC Group, and we offer a comprehensive benefits package, as well as opportunities for learning and development and career growth. We believe our people are at their brilliant best when they feel bolstered in all aspects of their well-being, and we offer wellness programs and flexible working arrangements to provide that vital support.

What do we offer in return?

We have a high-performance culture which is balanced evenly with world‑class well‑being initiatives and benefits:

• Flexible working
• 💸 Financial & Investment
• Pension
• Life Assurance
• Share Save Scheme
• Maternity & Paternity leave
• 🙋🏾 Community & Volunteering Programmes
• Green Car Scheme
• 🚴 Cycle Scheme
• 🧑🏻🤝🧑🏻 Employee Referral Program
• 🧘🏻 Lifestyle & Wellness
• 🎓 Learning & Development
• 👨🏿🦽 Diversity & Inclusion

So, what's next?

If this sounds like the right opportunity for you, then we would love to hear from you! Click on apply to this job to send us your CV and cover letter and the relevant member of our global talent team will be in touch with you. Alternatively send your details to [e-mail].

About your application

We review every application received and will get in touch if your skills and experience match what we're looking for. If you don't hear back from us within 10 days, please don't be too disappointed - we may keep your CV on our database for any future vacancies and we would encourage you to keep an eye on our career opportunities as there may be other suitable roles. If you do not want us to retain your details, please email [e-mail]. All personal data is held in accordance with the NCC Group Privacy Policy (candidate-privacy-notice-261023.pdf (nccgroupplc.com)). We are committed to diversity and flexibility in the workplace. If you require any reasonable adjustments to support you during the application process, please tell us at any stage.

Please note that this role involves mandatory pre-employment background checks due to the nature of the work NCC Group does. To apply, you must be willing and able to undergo the vetting process. This role being advertised will be subject to BS7858 screening as a mandatory requirement.