SOC Analyst - Cloud Security & Incident Response (Hybrid)

Starling Bank; Manchester; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

25 days holiday

Birthday leave

Pension scheme

Life insurance 4x salary

Private medical insurance

Volunteering time

Cycle to Work

EV leasing

Waitrose discounts

Job summary

Starling Bank in the UK is seeking a SOC Analyst to join our cyber security function. This role supports our 24/7 operational capabilities with an on-call rota (not shift-based).

As a member of the Starling SOC team, you will protect customers, assets and systems using the latest tech, with a focus on incident triage, response, investigations and threat hunting in a fast-paced fintech environment.

Qualifications

• 3+ years in an in-house SOC role or team.
• Understanding of AWS Security Solutions (or other cloud).
• Experience with cloud investigations (AWS/GCP).
• Experience with analytics/SIEM platforms.
• Experience in CSIRT/SOC functions and IR engagements.
• Endpoint and cloud investigations experience.
• Interest in automation and threat intelligence.

Responsibilities

• Triage, respond to and investigate alerts from multiple sources.
• Enhance analytic triggers to improve alert efficacy.
• Develop incident handling and readiness processes.
• Proactively hunt threats using threat intelligence.
• Document incidents and investigations.

Skills

SOC analysis

AWS security

SIEM experience

CSIRT/SOC functions

Incident response

Threat hunting

Tabletop exercises

Automation interest

Threat intelligence

Python/Go/Java

Education

Cyber/Security degree

Tools

SIEM tools

Cloud platforms (AWS/GCP)

Endpoint security

Job description

Starling Bank in the UK is seeking a SOC Analyst to join our cyber security function. This role supports our 24/7 operational capabilities with an on-call rota (not shift-based).

As a member of the Starling SOC team, you will protect customers, assets and systems using the latest tech, with a focus on incident triage, response, investigations and threat hunting in a fast-paced fintech environment.