SOC Security Analyst – Cloud & Incident Response

Starling Bank; Greater London; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

25 days holiday

Birthday day off

Pension scheme

Private medical insurance

Life insurance

Volunteer time

Discounts with retail partners

Cycle to work

EV leasing

Job summary

Starling Bank is seeking a skilled SOC Analyst to join our cyber security function. You’ll support our 24/7 operations, handle incident triage, response, and investigations, and protect customer data across cloud and on‑prem environments.

This role is on a hybrid model with at least one in‑person day per week at our London offices. You’ll work with SecOps professionals to tune analytic triggers, develop incident handling playbooks, and participate in threat hunting and tabletop exercises.

Qualifications

• 3+ years experience in an in-house SOC role and team.
• Understanding of AWS Security Solutions (or other Public Cloud Solutions).
• Analysis and Incident Response experience with Cloud systems such as AWS or GCP.
• Experience working and supporting analytics/SIEM platforms.
• Experience working in CSIRT/SOC functions.
• Experience supporting and conducting Incident Response engagements.
• Experience in endpoint based investigations.
• Experience in cloud based investigations.
• Experience with Incident Command and conducting Tabletop Exercises.
• Interest in Automation.
• Interest in Threat Intelligence and Analytic Tuning.
• High level understanding of mobile, network and OS security controls.
• Programming in Python, Go and/or Java.
• Cyber/Information Security related degree or qualifications would be desirable but not required

Responsibilities

• Incident Triage, Response, and Investigations based on Alerts from multiple sources.
• Investigating and responding to security alerts raised by users.
• Enhancing and creating analytic triggers to improve alert efficacy.
• Continuously developing incident handling and readiness processes.
• Proactive threat hunting based on threat intelligence.
• Documentation of incidents and investigations.

Skills

SOC Analyst experience

AWS security

Cloud incident response

SIEM experience

CSIRT/SOC functions

Incident response engagements

Endpoint investigations

Cloud investigations

Incident command & drills

Automation interest

Threat intelligence

Mobile/network/OS security

Python/Go/Java

Cyber security degree/qualifications

Education

Cyber/Information Security degree

Job description

Starling Bank is seeking a skilled SOC Analyst to join our cyber security function. You’ll support our 24/7 operations, handle incident triage, response, and investigations, and protect customer data across cloud and on‑prem environments.

This role is on a hybrid model with at least one in‑person day per week at our London offices. You’ll work with SecOps professionals to tune analytic triggers, develop incident handling playbooks, and participate in threat hunting and tabletop exercises.