SOC Analyst

Fynity; Watford; On-site; GBP 40,000 - 55,000; Full time

Job summary

A leading consultancy in cybersecurity seeks a SOC Analyst to join its Security Operations Centre in Watford. This role requires experience in a Security Operations Centre (SOC) and solid knowledge of SIEM tools like Microsoft Sentinel or Splunk. The successful candidate will monitor and triage security alerts, investigate events, and support incident response while continuously enhancing SOC capabilities. This is an exciting opportunity to work with cutting-edge technology in a critical environment.

Qualifications

• Experience in a Security Operations Centre (SOC).
• Knowledge of SIEM tools such as Microsoft Sentinel or Splunk.
• Familiarity with the MITRE ATT&CK framework.
• Strong analytical skills for log analysis.
• Understanding of enterprise security architecture.
• Knowledge of network protocols like TCP/IP and HTTP.

Responsibilities

• Monitor and triage security alerts to identify threats.
• Investigate events using system logs and telemetry.
• Support containment and recovery during incidents.
• Enhance SOC capabilities using threat-informed approaches.
• Produce incident reports for stakeholders.
• Assist with threat intelligence activities.
• Stay updated on evolving threats and best practices.

Skills

Hands-on experience working in a Security Operations Centre (SOC)

Solid knowledge of SIEM tools like Microsoft Sentinel or Splunk

Familiarity with the MITRE ATT&CK framework

Strong analytical skills in log analysis and network monitoring

Basic understanding of enterprise security architecture

Good grasp of network protocols such as TCP/IP, HTTP, SMTP, DNS

Education

Eligibility for DV clearance

Tools

SIEM tools

Job description

SOC Analyst
Location: Hemel Hempstead, United Kingdom (Onsite, 24/7 Shift Pattern)
Clearance: Must be eligible for high-level UK security clearance – British Citizens only

Join a leading consultancy at the forefront of cybersecurity within the aerospace, defence, and national security sectors. We're looking for a SOC Analyst (Level 2) to become a core part of our high-performing Security Operations Centre, helping to protect critical systems and infrastructure for some of the most secure organisations in the UK.

Whether you’re an experienced SOC professional or an ambitious Junior SOC Analyst ready for the next challenge, this is a fantastic opportunity to make a real impact in a fast-paced, country critical environment.

The Role:

• Monitoring and triaging security alerts to identify potential threats across client environments
• Investigating events using system logs, network traffic, and endpoint telemetry
• Supporting containment and recovery efforts during active security incidents
• Continuously enhancing SOC capabilities, tooling, and detection rules using threat-informed approaches like MITRE ATT&CK
• Producing detailed incident reports and documentation for both technical and non-technical stakeholders
• Assisting with threat intelligence activities as needed
• Staying current on evolving threats, attack techniques, and industry best practices

For the SOC role you will have

• Hands‑on experience working in a Security Operations Centre (SOC)
• Solid knowledge of SIEM tools such as Microsoft Sentinel or Splunk
• Familiarity with the MITRE ATT&CK framework and threat detection methodologies
• Strong analytical skills with a keen eye for detail in log analysis and network monitoring
• Basic understanding of enterprise security architecture including firewalls, VPNs, AV, and web applications
• Good grasp of network protocols such as TCP/IP, HTTP, SMTP, and DNS
• Eligibility for DV clearance (must have resided in the UK for the last 10 years)

In this SOC role you will have the opportunity to work with cutting‑edge tools and technologies and be part of a team defending country critical technology.