SOC Analyst: Threat Detection & Incident Response

OM Soft Solutions Limited; Elstree; On-site; GBP 55,000 - 75,000; Full time

Job summary

OM Soft Solutions is seeking a skilled SOC Analyst to strengthen its cybersecurity team. The role focuses on monitoring security events, investigating threats, and supporting incident response to protect critical assets.

You will work with SIEM/EDR, analyze logs from firewalls, endpoints, and cloud platforms, collaborate with IT and stakeholders, and help improve detection use cases and playbooks to keep pace with evolving threats.

Responsibilities

• Utilize security platforms (SIEM, EDR/XDR, threat intel, vulnerability management, case management) to investigate and respond to threats.
• Analyze logs and telemetry from firewalls, IDS/IPS, endpoints, antivirus, cloud platforms to detect IOCs and anomalies.
• Triage, assess and prioritize security alerts based on risk and severity.
• Investigate and respond to cybersecurity incidents including malware infections, phishing attacks, unauthorized access attempts, insider threats, and potential data breaches.
• Contain, mitigate, remediate, and document security incidents in accordance with incident response procedures.
• Operate and maintain security technologies including SIEM platforms, endpoint security solutions, IDS/IPS, firewalls, and PKI services.
• Continuously monitor network traffic, security events, system logs, and alerts to identify suspicious activity, potential threats, and security incidents.
• Collaborate with IT, security, and business stakeholders to investigate and resolve security-related issues.
• Maintain accurate incident records, investigation notes, and response activities to support compliance and audit requirements.
• Contribute to the continuous improvement of security monitoring capabilities, detection use cases, playbooks, and response processes.
• Stay up to date with emerging cyber threats, vulnerabilities, attacker TTPs, and industry best practices.

Job description

OM Soft Solutions is seeking a skilled SOC Analyst to strengthen its cybersecurity team. The role focuses on monitoring security events, investigating threats, and supporting incident response to protect critical assets.

You will work with SIEM/EDR, analyze logs from firewalls, endpoints, and cloud platforms, collaborate with IT and stakeholders, and help improve detection use cases and playbooks to keep pace with evolving threats.