SOC Analyst

TN United Kingdom; West Yorkshire; On-site; GBP 40,000 - 70,000; Full time

Job summary

A forward-thinking company in the Aerospace & Defence sector is on the lookout for a skilled SOC Analyst to enhance its Security Operations Centre. This role involves monitoring and analyzing potential cyber threats, developing automated workflows, and applying threat intelligence to safeguard critical infrastructure. The ideal candidate will possess a strong foundation in network security and experience with tools like Splunk and Sentinel. Join a dynamic team dedicated to continuous improvement and innovation in cybersecurity, where your expertise will play a crucial role in protecting vital assets.

Qualifications

• Experience in monitoring and investigating cyber threats.
• Familiarity with security tools like Splunk and Sentinel.

Responsibilities

• Monitor and analyze alerts and network traffic for security incidents.
• Develop automation workflows for common attack types.

Skills

Cybersecurity

Incident Response

Threat Intelligence

Python/Scripting

Network Security

Splunk

AWS/Azure

Tools

Splunk

Sentinel

SOAR Tools

Job description

Social network you want to login/join with:

Job Title: SOC Analyst

A global leader in the Aerospace & Defence sector is seeking a technically skilled SOC Analyst to support the daily operations and continuous improvement of a dedicated Security Operations Centre (SOC) for a major UK CNI organisation based in Leeds.

The successful candidate will be required to undergo governmental clearance.

Responsibilities:

1. Prepare and deliver shift handover briefs.
2. Monitor, triage, analyze, and investigate alerts, log data, and network traffic using the Protective Monitoring platform and internet resources to identify cyber-attacks and security incidents.
3. Write high-quality security incident tickets, utilizing existing knowledge resources and independent research.
4. Understand and apply Threat Intelligence in an operational context.
5. Develop workflows for automation into SOAR tools for common attack types.
6. Continuously improve the service, review use cases, and propose changes in line with evolving threats.
7. Possess basic Python and/or scripting skills; familiar with Windows, OS X, and Linux.
8. Experience with Splunk and Sentinel.
9. Work with a range of security tools and technologies.
10. Have a strong understanding of security architecture, particularly networking.
11. Have detailed knowledge of threat intelligence, threat actors, TTPs, and operationalizing threat intelligence.
12. Experience investigating complex network intrusions, including state-sponsored groups or targeted ransomware attacks.
13. Understand TCP/IP components to distinguish normal and abnormal traffic.
14. Knowledge of AWS and/or Azure cloud services.
15. Experience with Splunk (including ES) and/or Sentinel; content development experience is desirable.

Application Process:

If interested in this long-term contract opportunity, please email your CV and contact number to arrange a call.