SOC Incident Response Analyst

Fujitsu; Warrington; On-site; GBP 45,000 - 60,000; Full time

Job summary

A leading tech firm in Warrington is hiring a SOC Incident Response Analyst to join their Security Operations Centre. This hands-on role involves investigating security incidents and conducting threat hunting initiatives. Ideal candidates will have strong cybersecurity skills, especially in incident response and digital forensics. The position requires collaboration with the Cyber Threat Intelligence team and maintaining detailed incident reports. A proactive mindset and the ability to adapt to evolving cyber threats are essential for success in this role.

Qualifications

• Strong understanding of cybersecurity principles and practical experience in forensics and incident response.
• Proficient in investigating security incidents and analysing IOCs and TTPs.
• Ability to work collaboratively with Cyber Threat Intelligence teams.

Responsibilities

• Conduct in-depth host and XDR forensics to investigate security incidents.
• Carry out proactive threat hunting and analyse data for hidden threats.
• Maintain accurate incident records and write comprehensive incident reports.

Skills

Analytical problem-solving

Collaboration and teamwork

Communication

Adaptability

Decision-making

Continuous improvement

Tools

EDR/XDR platforms

Forensic tools

Job description

Job Title: SOC Incident Response Analyst

Location: Warrington, UK Travel May be required

Work Your Way is our approach to flexible working – this is available from day 1 of joining.

We are seeking a highly motivated and skilled SOC Incident Response Analyst to join our growing Security Operations Centre. This crucial role focuses on executing incident response activities, contributing to proactive threat hunting initiatives, and working closely with the Cyber Threat Intelligence team to support these efforts.

This is a hands-on technical position requiring a strong understanding of cybersecurity principles and practical experience in forensics and incident responseacross diverse environments, including on-premises, Azure, AWS, and Microsoft 365 services.You will play a key role in analysing security incidents, participating in threat hunting exercises, and contributing to the overall security of our diverse customer base.

The role demands profound technical expertise in digital forensics and incident response, specificallyutilizing both host-based tools and EDR/XDR platforms,coupled with a proactive mindset to identify and respond to evolving cyber threats.

Key Responsibilities:

• Carry out in-depth host and XDR forensicsto investigate security incidents, and support containment and eradication efforts.

• Conduct proactive threat hunting, analysing data for IOCs and TTPs to uncover hidden threats, identify security weaknesses, and support Detection Engineering.

• Work closely with the Cyber Threat Intelligence team to integrate and utilise threat intelligence to inform incident investigations and threat hunting efforts.

• Maintain accurate incident records,write comprehensive incident and threat hunting reports,and contribute to post-incident reviews and lessons learned.

• Stay current with evolving cyber threats and technologies, leveraging formal training (e.g., SANS), certifications, industry events, and self-directed study to stay ahead of evolving threats

• Participate in the on-call rotation to provide support for critical incidents.

Your transferable skills and experience:

• Analytical problem-solving: Ability to investigate complex data and identify patterns or anomalies

• Collaboration and teamwork: Experience with working across functions to resolve time pressured issues.

• Communication: Ability to explain technical findings in a clear manner to technical and non-technical audiences.

• Adaptability: Comfortable learning new tools, processes and technologies quickly.

• Decision-making: Able to prioritise actions and make judgements under pressure.

• Continuous improvement: Committed to documenting lessons learned and improving processes, practices and the skillset of the wider operational team.