SOC Monitoring Analyst - DV Cleared

identifi Global Resources; Preston; On-site; GBP 55,000 - 75,000; Full time

Job summary

Responsibilities include escalation, SIEM tuning, reporting to leadership, and supporting use-case development. The role is onsite in Preston for an initial 6 months with potential extension.

Qualifications

• 6 months duration with potential extension.
• Role involves Vulnerability Management and incident response.
• Experience in government/defence or critical infrastructure SOC.
• DV clearance required; UK nationals only.
• Onsite in Preston, United Kingdom.

Responsibilities

• Act as escalation point for security incidents.
• Conduct Vulnerability Management and incident response activities.
• Prepare incident reports and SOC metrics for leadership.
• Work hands-on with SIEM tooling and develop use-cases.
• Contribute to reporting, configuration changes and operational alignment.
• Ensure incident workflows and escalation paths are robust and auditable.

Skills

SOC operations

Vulnerability management

Incident response

SIEM tooling

ServiceNow

Stakeholder reporting

Regulated environments

GCAP programs

Job description

6 months duration with probability to discuss extension

Location - Preston, onsite everyday

Please be aware that due to security vetting requirements - we can only consider UK nationals with an active DV clearance

Role Overview

We are seeking an experienced SOC Analyst to play a pivotal role in the operation, and continuous improvement of a critical Security Operations Centre (SOC) supporting MOD programme. You will be hands on responsible for Vulnerability Management, incident management, and SOC services meet agreed quality and assurance standards within a highly regulated environment.

Key Responsibilities

• Act as the escalation point for all security incidents
• Conduct Vulnerability Management and incident response activities
• Prepare report incidents and SOC performance metrics to SOC Leadership
• Work hands on with SIEM detection tooling and prepare reporting used for the use-case development
• Contribute to reporting and configuration changes, enhancements, and operational alignment
• Ensure incident workflows, escalation paths, and operational procedures are robust and auditable

Required Skills & Experience

• Experience in SOC operations within government, defence, or critical infrastructure
• Previous hands on experience in Vulnerability management and incident response and security operations escalation
• Understanding of SIEM platforms, detection engineering, and Vulnerability alert management
• Familiarity with ITSM tooling, ideally ServiceNow
• Strong stakeholder management and reporting capability
• Understanding of regulated environments (MOD, HMG, Defence primes, or similar)
• Exposure to large-scale programmes (e.g. GCAP, major defence or aerospace programmes)