SOC Analyst (Shift Based)

Phoenix Software; Pocklington; On-site; GBP 25,000 - 35,000; Full time

Job summary

Phoenix Software is seeking a Junior SOC Analyst to join our Security Operation Centre in the UK. This first-line role responds to incidents triggered by security tools and operates on shift patterns including nights and weekends.

The position supports incident response, threat hunting, and documentation across dashboards and automation. Onboarding occurs on-site in Pocklington, with remote work enabled thereafter.

Qualifications

• Role requires infrastructure and network background with security qualifications.
• Likely currently in another MSP rather than an end client.
• Experience in SOC environments is beneficial.

Responsibilities

• Respond to technical support inquiries and manage ticket queues within the SOC.
• Perform proactive threat hunting and assist in threat intelligence development.
• Document incidents, create use cases, reporting, dashboards and automation capabilities.

Skills

SIEM tools

Microsoft Sentinel

Microsoft Azure

ITSM

Communication skills

Shift work

Job description

Overview of the role

Phoenix enables digital transformation in the workplace, empowering UK organisations to innovate and transform with cloud and hybrid infrastructures, data, AI, security, and collaboration tools.

We are seeking a Junior SOC Analyst to work within our Security Operation Centre (SOC) environment as a first line responder to incidents triggered by security toolsets. This is a shift-based role which includes nights and weekends.

What will you be doing?

• Technical Support: you will respond to technical support inquiries and manage individual ticket queues within the SOC, ensuring SLA’s are met and severity and status changes are appropriate.


• Threats: you will execute proactive threat hunting in client’s environment’s and assist in the development of Threat Intelligence within the business.


• Documentation / Analysis: you will regularly provide in-depth analysis of security incidents as they occur as well as assisting other analysts with the creation of new use cases, reporting, dashboard and automation capabilities. You will ensure you document all triggered incidents and metrics to provide to SOC management for further analysis.

Why you should apply?

At Phoenix, our philosophy is simple, we aim to be the UK’s leading IT solution and managed service provider and that means we recognise that it’s our people who are the heart of everything we do.

We do this by providing the encouragement, support and skill development that you need to be the very best you can be at work. We are proud of our culture, so much so that we have developed our Culture Blueprint which you can read here.

What are we looking for?

The right person for this role must have an infrastructure and network background and necessary security qualifications to respond and assist in the remediation of security incidents. It’s likely that you are already working in another MSP rather than for an end client.

Key Skills:

• Experience with SIEM tools preferably Microsoft Sentinel


• Experience & qualifications in Microsoft Azure


• Experience working with an ITSM


• Excellent oral and written communication skills


• Flexibility to work shift patterns

Practical stuff

Where is the role based?

This role can be fully remote apart from an initial onboarding week on-site in Pocklington.

What about security clearance?

You will need to have lived in the UK continuously for at least 5 years and have no criminal record to achieve the clearance you need for this role.

What are the benefits?

You can read about the benefits on offer here.

Have you made it this far?

Here’s the thing, though, research suggests that 60% of women and underrepresented people might have already talked themselves out of applying. Even if you don’t check every box above, we want to encourage you to introduce yourself.

We believe a diversity of perspectives and experiences makes a team stronger, and the stronger our team, the more successful we will be.