SOC Level 2 Analyst – Incident Response & SIEM Expert

The Nippon Telegraph and Telephone Corporation (NTT); Birmingham; On-site; GBP 45,000 - 65,000; Full time

Job summary

The Nippon Telegraph and Telephone Corporation (NTT) is seeking a Security Analyst (Level 2) to join its UK Sovereign SOC. You’ll investigate alerts escalated from Level 1, validate incidents, and coordinate containment, eradication, and recovery actions.

The role involves using SIEM platforms, supporting incident response, and contributing to improvements in detection logic and performance metrics. You will work with IT and security teams, mentor Level 1 analysts, and apply threat intelligence

Qualifications

• 2–4 years' experience in IT security, ideally in a SOC/NOC.
• Hands-on with SIEM platforms such as Splunk, Microsoft Sentinel, or QRadar.
• Experience with cloud platforms like Microsoft Azure and AWS.
• Proficiency with MS Office tools, especially Excel and Word.
• Eligibility for UK Security Clearance (SC) or holding it.

Responsibilities

• Investigate security alerts and events escalated from Level 1 analysts, validating and classifying activity.
• Coordinate and support incident response activities, including containment, eradication, and recovery.
• Follow major incident procedures for high-severity incidents and escalate to stakeholders as needed.
• Provide technical guidance to Level 1 analysts during live incidents.
• Develop and tune SOC detection use cases and contribute to process improvements.

Skills

Incident response

Analytical thinking

Written and verbal communication

Education

GIAC certification

CySA+ certification

SC-200 certification

Tools

Splunk

Microsoft Sentinel

QRadar

Azure

AWS

Excel

Job description

The Nippon Telegraph and Telephone Corporation (NTT) is seeking a Security Analyst (Level 2) to join its UK Sovereign SOC. You’ll investigate alerts escalated from Level 1, validate incidents, and coordinate containment, eradication, and recovery actions.

The role involves using SIEM platforms, supporting incident response, and contributing to improvements in detection logic and performance metrics. You will work with IT and security teams, mentor Level 1 analysts, and apply threat intelligence