SOC Analysts SOC Lead

SmartSourcing Ltd; Glasgow; On-site; GBP 100,000 - 125,000; Full time

Job summary

A government service provider in Glasgow seeks Senior and Lead SOC Analysts to monitor security tools and respond to incidents in a 24/7 operational environment. Applicants must possess SC or DV clearance, be eligible for DV vetting, and have a bachelor's degree in computer science or cybersecurity. The role includes continuous monitoring, incident triage, and tool management responsibilities. This position promotes diversity and inclusion, emphasizing the importance of a comprehensive approach to security.

Qualifications

• SC or DV security clearance required.
• Eligible for DV vetting - British Nationality necessary.
• Experience working in a 24/7 environment.

Responsibilities

• Monitor security tools for suspicious activity for incident detection.
• Analyse alerts to determine the nature of security incidents.
• Perform initial containment actions for confirmed incidents.
• Create detailed reports and tickets for detected incidents.
• Assist in the maintenance and optimization of security tools.

Skills

Experience of SPLUNK in a Security Operations Centre (SOC)

Foundational understanding of networking concepts (TCP/IP, DNS)

Understanding of operating systems (Windows, Linux)

Common cyber-attack techniques

Certifications like CompTIA Security+ or CySA+

Education

Bachelor's degree in computer science or Cyber Security

Job description

Senior SOC Analysts and Lead SOC Analysts for our government client based near Glasgow.

Applicants need to have Active SC or DV clearance And be Eligible for DV vetting if successful.

Fully onsite working on a 24/7 shift pattern.

Must be eligible/for DV vetting - Single British Nationality required by our government services client.

Rate #removed# pd (depending on which role) Inside IR35 - Umbrella Company.

Working in an DV (Developed Vetting) Security cleared environment. You will hold a current DV or SC Security Clearance, or be eligible to undertake.

The role requires working as part of a 24/7 shift pattern. This pattern will include weekends and bank holidays.

Skills and Experience Required:

• Experience of SPLUNK with in a Security Operations Centre (SOC).
• A bachelor's degree in computer science, Cyber Security or relevant experience.
• You should have a foundational understanding of networking concepts (TCP/IP, DNS, etc.), operating systems (Windows, Linux), and common cyber-attack techniques.
• Certifications like CompTIA Security+, Cybersecurity Analyst (CySA+), or a similar certification are a significant bonus to the role.

Key Responsibilities

• Continuous Monitoring: You will monitor security tools, including Security Information and Event Management (SIEM) systems, to detect suspicious activity. You will be the first to see potential threats and will need to be efficient and professional response against defined processes.
• Incident Triage: You will analyse alerts and logs to determine if an event is a genuine security incident or a false positive. You will need to be methodical and follow established procedures to classify and prioritize incidents.
• Initial Incident Response: For confirmed incidents, you’ll perform initial containment actions, such as isolating affected systems, and elevate the incident to a Level 2 or 3 analyst for deeper investigation.
• Reporting and Documentation: You will create detailed tickets and reports for all detected incidents, documenting your findings and the steps you took. This is crucial for tracking incidents and for future analysis.
• Tool Management: You will assist in the maintenance and optimization of security tools, ensuring they are working correctly and effectively.

Please apply online in the first instance.

SmartSourcing are a Disability Confident Employer and we promote, celebrate and value diversity, we are committed to promoting equality and inclusion for all.