SOC Analyst (Level 2) – 24/7 Onsite, UK Defence

Fynity; Watford; On-site; GBP 40,000 - 55,000; Full time

Job summary

A leading consultancy in cybersecurity seeks a SOC Analyst to join its Security Operations Centre in Watford. This role requires experience in a Security Operations Centre (SOC) and solid knowledge of SIEM tools like Microsoft Sentinel or Splunk. The successful candidate will monitor and triage security alerts, investigate events, and support incident response while continuously enhancing SOC capabilities. This is an exciting opportunity to work with cutting-edge technology in a critical environment.

Qualifications

• Experience in a Security Operations Centre (SOC).
• Knowledge of SIEM tools such as Microsoft Sentinel or Splunk.
• Familiarity with the MITRE ATT&CK framework.
• Strong analytical skills for log analysis.
• Understanding of enterprise security architecture.
• Knowledge of network protocols like TCP/IP and HTTP.

Responsibilities

• Monitor and triage security alerts to identify threats.
• Investigate events using system logs and telemetry.
• Support containment and recovery during incidents.
• Enhance SOC capabilities using threat-informed approaches.
• Produce incident reports for stakeholders.
• Assist with threat intelligence activities.
• Stay updated on evolving threats and best practices.

Skills

Hands-on experience working in a Security Operations Centre (SOC)

Solid knowledge of SIEM tools like Microsoft Sentinel or Splunk

Familiarity with the MITRE ATT&CK framework

Strong analytical skills in log analysis and network monitoring

Basic understanding of enterprise security architecture

Good grasp of network protocols such as TCP/IP, HTTP, SMTP, DNS

Education

Eligibility for DV clearance

Tools

SIEM tools

Job description

A leading consultancy in cybersecurity seeks a SOC Analyst to join its Security Operations Centre in Watford. This role requires experience in a Security Operations Centre (SOC) and solid knowledge of SIEM tools like Microsoft Sentinel or Splunk. The successful candidate will monitor and triage security alerts, investigate events, and support incident response while continuously enhancing SOC capabilities. This is an exciting opportunity to work with cutting-edge technology in a critical environment.