SOC Analyst

Vector Resourcing; United Kingdom; On-site; GBP 45,000 - 65,000; Full time

Job summary

Vector Resourcing is seeking a SOC Analyst to enhance security capabilities across the Group IT Infrastructure function. The role involves leading security monitoring evolution, improving security practices, and ensuring effective communication of risk across the organization.

Key responsibilities include developing alerting capabilities, enhancing the SIEM platform, orchestrating security incident responses, and creating reports for senior leadership.

Responsibilities

• Own and develop the organisation’s security monitoring and alerting capability.
• Lead the review and improvement of the current SIEM platform.
• Drive secure configuration standards across environments.
• Build strong working relationships with DPO and infrastructure teams.
• Monitor and respond to security events from SIEM and other tools.
• Lead security incident response and post-incident review.
• Produce clear reporting for senior leadership.
• Communicate security incidents effectively across the organisation.
• Establish documentation and governance for security processes.
• Drive timely ticket resolution and structured security change.

Skills

Security monitoring

SIEM platform improvement

Incident response

Strong communication

Job description

Our client is looking for a SOC Analyst to strengthen and mature security across the Group IT Infrastructure function. You will lead the evolution of security monitoring, controls and operational processes, working closely with infrastructure, service desk and data protection stakeholders. This role is focused on improving security capability, driving change in a long-established environment, and giving the business clearer visibility of risk and response.

Responsibilities

• Own and develop the organisation’s security monitoring and alerting capability across infrastructure, systems and digital assets.
• Lead the review and improvement of the current SIEM platform, including the evolution of SolarWinds Event Manager and the definition of a clearer long-term approach.
• Drive secure configuration standards and ensure security controls are applied consistently across network, server and storage environments.
• Build strong working relationships with the DPO, infrastructure teams and service desk to embed stronger security practices into day-to-day operations.
• Monitor, analyse and respond to security events from SIEM, network and other security tools, ensuring issues are assessed and escalated appropriately.
• Lead security incident response activity, including coordination, communication, remediation follow-up and post-incident review.
• Produce clear and credible reporting for senior leadership and board-level audiences, translating technical risk into business impact.
• Communicate security incidents and wider security messages across the organisation in a measured and effective way.
• Establish and improve documentation, operational procedures and governance around security processes and controls.
• Drive timely ticket resolution and a structured, methodical approach to security change and continuous improvement.