SOC Analyst - Real-Time Cyber Defense (Hybrid, Gatwick)

Civil Aviation Authority; Guildford; Híbrido; GBP 23.000 - 38.000; A tiempo parcial

Ventajas ofrecidas por este puesto de trabajo

Flexible & hybrid working

28 days annual leave + holidays

Pension scheme

Wellbeing room

Mental health support

Employee assistance programme

Gym access at Gatwick

EV charging points

Internal training

Descripción de la vacante

The Civil Aviation Authority (CAA) is seeking a SOC Analyst to join our new Security Operations Centre at Gatwick. You will monitor, triage and investigate security events to protect critical aviation systems and data in real time.

This fixed-term role (12-18 months) offers hybrid working, a salary up to £38,000, and the chance to develop expertise in SIEM, EDR and incident response within a regulated environment.

Formación

• Experience in a SOC, threat detection, or security operations environment.
• Familiar with incident response processes and evidence handling.
• Knowledge of SIEM/EDR platforms (Microsoft Sentinel/Defender).
• Understanding of Windows, Active Directory, and basic networking concepts.
• CompTIA Security+ or equivalent foundational knowledge.
• Strong communication and collaboration skills during investigations.

Responsabilidades

• Monitor, triage and investigate security events in a SOC.
• Investigate incidents impacting operations, systems, or data.
• Support continuous improvement of security monitoring and response capabilities.

Conocimientos

SOC experience

SIEM (Sentinel)

EDR

Windows AD

Incident response

IOCs

Communication

Collaboration

Herramientas

Microsoft Sentinel

Defender

PowerShell

Logic Apps

Azure

Descripción del empleo

The Civil Aviation Authority (CAA) is seeking a SOC Analyst to join our new Security Operations Centre at Gatwick. You will monitor, triage and investigate security events to protect critical aviation systems and data in real time.

This fixed-term role (12-18 months) offers hybrid working, a salary up to £38,000, and the chance to develop expertise in SIEM, EDR and incident response within a regulated environment.