V05727 DIG - Level 1 SOC Cyber Analyst

Outsource Uk Ltd; Hereford; On-site; GBP 13,000 - 20,000; Full time

Job summary

Outsource UK Ltd in Hereford is seeking a Level 1 SOC Analyst for a 12-month, on-site contract to support a leading defence organisation. You will perform alert triage, initial investigations and coordinate with an outsourced SOC for incident response and escalation.

The role emphasizes structured, process-driven work in a fast-paced security operations environment with hands-on SIEM/EDR tooling usage.

Qualifications

• Experience in a SOC or Security Operations environment.
• Hands-on exposure to SIEM tools (e.g. Sentinel, Splunk, QRadar).
• Understanding of incident response, alert triage and escalation processes.

Responsibilities

• Monitoring and triaging security alerts in a live SOC environment.
• Conducting initial investigations and validating potential threats.
• Escalating incidents in line with defined processes and playbooks.
• Working closely with internal teams and external SOC providers.
• Supporting incident response and contributing to ongoing security operations improvement.

Skills

SOC operations

SIEM tools

EDR tools

Incident response

Playbooks

Communication

Tools

Sentinel

Splunk

QRadar

Job description

SOC Analyst - Level 1 | Hereford - On-site | 12-month contract (strong extension potential) | £55.90 PAYE / £75.48 Umbrella | Sole UK Nationals only

Working with a leading defence organisation, I'm looking for a Level 1 SOC Analyst to join a fast-paced security operations environment supporting critical infrastructure. This is a hands-on role, focused on alert triage, initial investigations, and working closely with an outsourced SOC to ensure effective incident response and escalation.

What you’ll be doing:

• Monitoring and triaging security alerts in a live SOC environment
• Conducting initial investigations and validating potential threats
• Escalating incidents in line with defined processes and playbooks
• Working closely with internal teams and external SOC providers
• Supporting incident response and contributing to continuous improvement of security operations

What they’re looking for:

• Experience in a SOC or Security Operations environment
• Hands-on exposure to SIEM tools (e.g. Sentinel, Splunk, QRadar)
• Understanding of incident response, alert triage, and escalation processes
• Familiarity with EDR tools and general security tooling
• Ability to work in a structured, process-driven environment

Please note:

• This role is fully on-site in Hereford
• Due to the nature of the work, only sole UK nationals can be considered