SOC Analyst: Cloud Security & Incident Response

Starling; Southampton; Hybrid; GBP 55,000 - 75,000; Full time

Benefits offered by this job

25 days holiday

Birthday day off

Private Medical Insurance

Company pension scheme

Life insurance

Cycle to Work

Job summary

Starling Bank is seeking a SOC Analyst to join our cyber security function. You will support 24/7 operational capabilities, handling incident triage, response and investigations across cloud and on‑premise environments.

Join our SOC team to work with SecOps professionals, enhance alerting, threat hunting and incident readiness, while adopting automation and threat intelligence to safeguard customers.

Qualifications

• 3+ years in-house SOC experience required or in a similar team.
• Experience with AWS Security Solutions or other public cloud platforms.
• Experience in incident triage, response, and investigations in cloud environments.
• Experience with analytics/SIEM platforms and CSIRT/SOC functions.
• Experience in Incident Response engagements and endpoint/cloud investigations.
• Interest in Automation and Threat Intelligence; basic scripting is a plus.

Responsibilities

• Triage, respond to, and investigate incidents from multiple data sources.
• Develop analytic triggers to improve alert efficacy and document incidents.
• Contribute to incident handling and readiness processes.
• Proactively hunt threats using threat intelligence and improve SOC tooling.
• Collaborate with cross-functional teams to protect customers and assets.

Skills

3+ years experience

AWS Security

Cloud incident response

SIEM experience

CSIRT/SOC functions

Incident response engagements

Endpoint investigations

Cloud investigations

Incident Command & Tabletop

Automation interest

Threat intelligence & analytic tuning

Security controls (mobile/network/OS)

Programming (Python/Go/Java)

Cyber/Security degree or certs (desire

Education

Cyber/Information Security degree

Tools

SIEM platforms

Cloud security tooling

Job description

Starling Bank is seeking a SOC Analyst to join our cyber security function. You will support 24/7 operational capabilities, handling incident triage, response and investigations across cloud and on‑premise environments.

Join our SOC team to work with SecOps professionals, enhance alerting, threat hunting and incident readiness, while adopting automation and threat intelligence to safeguard customers.