SOC Analyst - Active SC required

Matchtech; Essex; Hybrid; GBP 83,000 - 111,000; Full time

Benefits offered by this job

Remote with ad-hoc visits

Inside IR35

Job summary

Matchtech is seeking an SC-cleared SOC Analyst to support a defence/aerospace client on a 3-month contract in the UK. The role focuses on monitoring security events with IBM QRadar SIEM, incident response, and threat detection, with remote work and occasional site visits.

You will investigate incidents across platforms, manage the incident lifecycle, perform log analysis, and contribute to post-incident reviews, working to MITRE ATT&CK and NIST frameworks.

Qualifications

• Active SC clearance
• Experience within a Security Operations Centre (SOC)
• Proficiency with IBM QRadar SIEM for monitoring and incident response
• Familiarity with common query languages, preferably KQL
• Understanding of security processes and controls in enterprise environments
• Ability to work independently with minimal supervision
• Technical skills in Microsoft Defender, Microsoft Sentinel, and IBM QRadar
• Knowledge of incident response lifecycle and frameworks such as MITRE ATT&CK and NIST
• Experience with various incident types, including phishing, malware, and insider threats

Responsibilities

• Monitor and analyse security events using IBM QRadar SIEM
• Investigate and respond to security incidents across various platforms
• Manage the full incident lifecycle, from identification to resolution
• Conduct threat detection and analysis, along with threat hunting activities
• Perform detailed log analysis across multiple security platforms
• Produce incident reports and post-incident reviews
• Collaborate with team members to ensure robust security controls
• Investigate non-standard Cyber requests and provide appropriate responses

Skills

SC clearance

SOC experience

Incident response

Threat detection

Threat hunting

MITRE ATT&CK

NIST frameworks

Phishing / Malware awareness

Insider threats handling

Tools

IBM QRadar SIEM

Microsoft Defender

Microsoft Sentinel

Job description

Location: Harlow (remote with adhoc visits when required)

Duration: 3 month contract

Inside IR35

Active SC clearance required

Role details: We are looking for an SC cleared SOC Analyst to support our defence/aerospace client on a short term contract. The successful candidate will have proven experience using IBM QRadar SIEM in a monitoring and incident response capacity.

Key Responsibilities:

• Monitor and analyse security events using IBM QRadar SIEM
• Investigate and respond to security incidents across various platforms
• Manage the full incident lifecycle, from identification to resolution
• Conduct threat detection and analysis, along with threat hunting activities
• Perform detailed log analysis across multiple security platforms
• Produce incident reports and post-incident reviews
• Collaborate with team members to ensure robust security controls
• Investigate non-standard Cyber requests and provide appropriate responses

Job Requirements:

• Active SC clearance
• Experience within a Security Operations Centre (SOC)
• Proficiency with IBM QRadar SIEM for monitoring and incident response
• Familiarity with common query languages, preferably KQL
• Understanding of security processes and controls in enterprise environments
• Ability to work independently with minimal supervision
• Technical skills in Microsoft Defender, Microsoft Sentinel, and IBM QRadar
• Knowledge of incident response lifecycle and frameworks such as MITRE ATT&CK and NIST
• Experience with various incident types, including phishing, malware, and insider threats

If you are a SOC Analyst with a strong background in security operations and a keen eye for incident response and threat detection, our client wants to hear from you. This is a fantastic opportunity to contribute to a critical project within the Defence & Security sector.