SOC Analyst

Fynity; Watford; On-site; GBP 35,000 - 55,000; Full time

Job summary

An established industry player is seeking a SOC Analyst to join their elite Security Operations Centre. This role offers a unique opportunity to protect critical systems and infrastructure for high-security organizations in the UK. Ideal candidates will possess hands-on experience in SOC environments and a solid understanding of SIEM tools, alongside strong analytical skills. You will actively monitor security alerts, investigate potential threats, and enhance SOC capabilities using cutting-edge tools. If you are passionate about cybersecurity and ready to make a significant impact, this position is perfect for you.

Qualifications

• Hands-on experience in a Security Operations Centre is essential.
• Solid knowledge of SIEM tools and threat detection methodologies.

Responsibilities

• Monitor and triage security alerts to identify potential threats.
• Investigate events using system logs and network traffic.

Skills

Analytical Skills

Security Operations Centre (SOC) Experience

Log Analysis

Network Monitoring

Threat Detection Methodologies

Education

Eligibility for DV Clearance

Tools

SIEM Tools (Microsoft Sentinel, Splunk)

MITRE ATT&CK Framework

Job description

SOC Analyst
Location: Hemel Hempstead, United Kingdom (Onsite, 24/7 Shift Pattern)
Clearance: Must be eligible for high-level UK security clearance – British Citizens only

Join a leading consultancy at the forefront of cybersecurity within the aerospace, defence, and national security sectors. We're looking for a SOC Analyst (Level 2) to become a core part of our high-performing Security Operations Centre, helping to protect critical systems and infrastructure for some of the most secure organisations in the UK.

Whether you’re an experienced SOC professional or an ambitious Junior SOC Analyst ready for the next challenge, this is a fantastic opportunity to make a real impact in a fast-paced, country critical environment.

The Role:

• Monitoring and triaging security alerts to identify potential threats across client environments
• Investigating events using system logs, network traffic, and endpoint telemetry
• Supporting containment and recovery efforts during active security incidents
• Continuously enhancing SOC capabilities, tooling, and detection rules using threat-informed approaches like MITRE ATT&CK
• Producing detailed incident reports and documentation for both technical and non-technical stakeholders
• Assisting with threat intelligence activities as needed
• Staying current on evolving threats, attack techniques, and industry best practices

For the SOC role you will have

• Hands-on experience working in a Security Operations Centre (SOC)
• Solid knowledge of SIEM tools such as Microsoft Sentinel or Splunk
• Familiarity with the MITRE ATT&CK framework and threat detection methodologies
• Strong analytical skills with a keen eye for detail in log analysis and network monitoring
• Basic understanding of enterprise security architecture including firewalls, VPNs, AV, and web applications
• Good grasp of network protocols such as TCP/IP, HTTP, SMTP, and DNS
• Eligibility for DV clearance (must have resided in the UK for the last 10 years)

In this SOC role you will have the opportunity to work with cutting-edge tools and technologies and be part of a team defending country critical technology.