SOC Security Analyst – Cloud & Incident Response (Hybrid)

Starling; Greater London; Hybrid; GBP 55,000 - 85,000; Full time

Benefits offered by this job

25 days holiday plus public holidays

Birthday day off

Pension scheme

Private Medical Insurance

Perkbox discounts

Cycle to Work

Volunteering time

Job summary

Starling Bank is seeking a skilled SOC Analyst to join our cyber security function. You will support 24/7 operations, handling incident triage, response, and investigations across cloud and on-premise environments.

You will work with an expert SecOps team to protect customer assets and data using the latest security technologies. You should bring hands-on experience in SOC, cloud security (AWS/GCP), SIEM, and IR engagements, with a proactive mindset for threat hunting and automation.

Qualifications

• 3+ years in an in-house SOC role and team.
• Understanding of AWS Security Solutions (or other Public Cloud).
• Experience with analytics/SIEM platforms (AWS or GCP).
• Experience in CSIRT/SOC functions and IR engagements.
• Endpoint-based investigations and cloud-based investigations.
• Experience with Incident Command and Tabletop Exercises.
• Interest in Automation and Threat Intelligence/Analytic Tuning.
• High level understanding of mobile, network and OS security controls.
• Programming experience in Python, Go and/or Java.

Responsibilities

• Perform incident triage, response and investigations from multiple alert sources.
• Work with Cloud infrastructure, EDR, and perimeter tooling.
• Document incidents and investigations for post-mortems and audits.
• Develop and improve analytic triggers to enhance alert efficacy.
• Participate in proactive threat hunting based on threat intel.
• Contribute to incident handling readiness and playbooks.

Skills

SOC operations

AWS security

Incident response

SIEM

CSIRT/SOC

Threat intelligence

Automation interest

Python/Go/Java

Mobile/Network/OS security

Cloud investigations

Education

Cyber security degree

Cyber security qualification

Tools

SIEM platforms

Endpoint detection tools

Job description

Starling Bank is seeking a skilled SOC Analyst to join our cyber security function. You will support 24/7 operations, handling incident triage, response, and investigations across cloud and on-premise environments.

You will work with an expert SecOps team to protect customer assets and data using the latest security technologies. You should bring hands-on experience in SOC, cloud security (AWS/GCP), SIEM, and IR engagements, with a proactive mindset for threat hunting and automation.