SOC Analyst: Threat Detection & Incident Response

National Highways; Birmingham; On-site; GBP 42,000 - 60,000; Full time

Job summary

National Highways is seeking a SOC Analyst to join the Cyber Security team in Digital Services. You will collect and analyse security event data, develop rules for alerts, investigate potential threats, and initiate responses as needed.

The role may be based from any UK office with travel to regional offices. Key responsibilities include triaging incidents, developing response processes, and creating playbooks to align with security policy.

Qualifications

• Strong knowledge of firewalls, IDS/IPS, SIEM and endpoint protection tools.
• Proven background in a SOC, Digital Forensics or Malware Analysis.
• Cyber Security degree or related qualification, or significant relevant experience.
• Good understanding of threat intelligence and threat assessment principles.
• Ability to communicate tailored threat information to local stakeholders.

Responsibilities

• Support the Security Operations Team to detect, identify and triage security incidents using the provided security tooling and ticketing application.
• Develop and operate the National Highways incident response processes, working closely with the Service Desk and Service Operations Team when required.
• Support the development of key documentation, controls and playbooks to ensure compliance to security policy and security best practice.
• Follow industry developments in IT security and trending vulnerabilities to stay current with emerging threats.
• Be an ambassador for Cybersecurity; promoting good practices and the team's tools and services across the organisation.

Skills

Firewalls

IDS/IPS

SIEM

Endpoint protection

Education

Cyber Security degree

Job description

National Highways is seeking a SOC Analyst to join the Cyber Security team in Digital Services. You will collect and analyse security event data, develop rules for alerts, investigate potential threats, and initiate responses as needed.

The role may be based from any UK office with travel to regional offices. Key responsibilities include triaging incidents, developing response processes, and creating playbooks to align with security policy.