SOC Analyst

NCC Group; Manchester; On-site; GBP 45,000 - 60,000; Full time

Benefits offered by this job

Flexible Working

25 days holiday

Medicash

Pension

Life Assurance

Share Save Scheme

Volunteer programmes

Green Car Scheme

Cycle to work

Special Time Off

Family Planning

Job summary

NCC Group is hiring a L2 SOC Analyst for the MXDR Team in Manchester. You will monitor global systems, analyze alerts, and help customers prevent and respond to cyber incidents.

The role emphasizes detection, response, and continuous improvement of SOC processes within a leading security services provider. You will work with Microsoft XDR and Splunk, join a technically advanced team, and contribute to world-class services for customers while following defined escalation paths and reporting

Qualifications

• Experience in monitoring security events and responding to incidents within a SOC.
• Familiarity with Windows and Linux operating systems and standard network protocols.
• Experience with detection platforms and incident remediation documentation.

Responsibilities

• Monitor global systems for threats, vulnerabilities, and indicators of compromise.
• Analyze security alerts using NCC Group's UCP and underlying detection platforms.
• Provide incident remediation guidance and customer-focused reporting.

Skills

Security monitoring

Incident analysis

SOC operations

Windows OS

Linux OS

Threat hunting

Tools

Splunk Enterprise

Microsoft Sentinel

Defender/EDR tools

Job description

Department: Cyber Services and Capabilities

Location: GBR Manchester Hardman Boulevard

Description

Today, it is an unavoidable fact that your business-critical infrastructure and systems are at risk of attack. The key to good security is a clear understanding of what is most critical to the business. When you do not have enough internal resources, time, or skills to monitor and manage your IT environment 24/7, NCC Group can help, freeing up your skilled employees to focus on value-add activities.

NCC Group provides a range of managed and hosted services delivered from our Global Security Operations Centre (SOC), which operates 24/7, 365 days a year. Our team of over 100 accredited security experts is available around the clock, dealing daily with over 200 million log events and providing support for thousands of network devices.

NCC Group’s MXDR Team provides world-class Extended Detection and Response (XDR) services, detecting, responding to, and mitigating cyber-attacks on our customers' networks in our Security Operations Centres. We use a plethora of detection tools such as the Microsoft Security Stack, Splunk, EDR, IDS & IPS tools, and many more, all integrated with NCC Group's Unified Cyber Platform (UCP).

The MXDR Team is looking for L2 SOC Analysts with a passion for security to join the team, helping customers get the most out of our services and protect their networks. This is an opportunity to join a technically advanced and talented team and help NCC Group build and deliver world-class services to our customers.

This role is ideal for a seasoned SOC Analyst with experience in cybersecurity looking to broaden their scope of cyber skills with a strong focus on detection and response to cyber incidents.

Key Responsibilities

• Monitor global systems for potential threats, vulnerabilities, and indicators of compromise.
• Perform in-depth analysis of security alerts utilising both NCC Group's UCP and explore further using the underlying detection platform where necessary.
• Provide incident remediation and prevention documentation and recommendations to customers based on defined procedures and analyst experience.
• Document and adhere to processes related to security monitoring procedures.
• Provide customer service that always exceeds our customers’ expectations.
• Initiate escalation procedures to counteract potential threats, vulnerabilities, and threat actors.
• Compile and review service-focused reports.
• Act as an escalation point for junior team members, aiding and mentoring where necessary.
• Contribute to the continuous improvement of SOC procedures and documentation.
• Perform other SOC duties as assigned.

Skills, Knowledge & Expertise

Core Technical Skills & Experience

• Practical experience with security and networking tools such as Microsoft XDR (Sentinel, Defender) and Splunk Enterprise/Cloud/Enterprise Security
• Strong understanding of network protocols, endpoint detection, and digital forensics
• In-depth knowledge of Windows and Linux operating systems
• Hands-on experience analysing common security incidents and supporting endpoint security
• Ability to remain calm and effective during high-pressure and sensitive security situations

Desirable Certifications

• Microsoft: SC-200, AZ-500, AZ-900, MS-500
• Splunk: Certified User, Power User, Advanced Power User, Enterprise Security Administrator
• CrowdStrike: CCFR, CCFH
• CREST: CPSA, CRIA, CMRE, CNIA, CHIA
• CompTIA: Security+, Network+, CySA+
• Cisco: CCNA
• SANS: GCIA, GCIH, GSEC
• Other relevant certifications

Job Benefits

• Flexible Working: Balance your work and personal life with our flexible working options.
• Generous Holiday Allowance: Enjoy 25 days of holiday, plus bank holidays, with the option to buy up to 5 additional days of annual leave differs for SOC shift workers, please speak to your TA partner for more information).
• Medicash & Critical Illness Scheme
• Financial & Investment Benefits: Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme.
• Community & Volunteering Programmes: Make a difference in your community with our volunteering opportunities.
• Green Car Scheme: Drive green and save money with our eco-friendly car scheme.
• Cycle Scheme: Stay fit and healthy with our cycle-to-work scheme.
• Special Time Off: Take time off for those big moments in life, like getting married/entering into a civil partnership, becoming a grandparent, and welcoming home a new pet.
• Family Planning: Benefit from our generous maternity and paternity leave, as well as time off and support for those undergoing fertility treatments.

We review every application received and will get in touch if your skills and experience match what we’re looking for. If you don’t hear back from us within 10 days, please don’t be too disappointed – we may keep your CV on our database for any future vacancies and we would encourage you to keep an eye on our career opportunities as there may be other suitable roles.

To ensure a fair and consistent assessment process, candidates must not use AI tools to generate, suggest, coach or provide responses during live or recorded interviews unless this has been approved in advance, by the hiring team. For more information please read our AI in Hiring - Candidate Policy.

If you do not want us to retain your details, you can utilise the Manage Your Data tool provided by Pinpoint or contact us directly at: [e-mail]. All personal data is held in accordance with the NCC Group Privacy Notice.

We are committed to diversity and flexibility in the workplace. If you require any reasonable adjustments to support you during the application process, please tell us at any stage.

Please note that this role involves mandatory pre-employment background checks due to the nature of the work NCC Group does. To apply, you must be willing and able to undergo the vetting process.