Security Operations Centre Analyst

Security Operations Centre Analyst focuses on analyse security alerts and events, conduct initial investigations, and determine the appropriate response.

What the role involves

• Analyse security alerts and events, conduct initial investigations, and determine the appropriate response.
• Managing SOC Incident queues.
• Supporting the maintenance of monitored asset baselines of the customer environments.
• Preparing reports for managed clients to both technical and non-technical audiences.
• Collaborate on improving detection rules and use cases aligned with Mitre Att&ck and threat-informed defense.

Skills and requirements

• Knowledge and experience with Mitre Att&ck Framework.
• Basic knowledge of client-server applications, multi-tier web applications, relational databases, firewalls, VPNs, and enterprise AntiVirus products.
• Entry level cyber security certification ( CompTIA Security+, CEH, CPSA).
• Experience with SIEM technologies, namely Sentinel and Splunk, with some experience with QRadar.

Confirmed role details

• Role based Onsite in our Farnborough office and is shift work.
• Employment Type: Permanent.
• Security Clearance Level: Eligible for DV Clearance.
• 25 days annual leave with the choice to buy.

Additional role context

• We’re expanding our Security Operations Centre in Farnborough and looking for sharp, collaborative L2 SOC Analysts to protect enterprise‑scale environments across the Defence secto.
• Update security incident documentation, including incident reports, analysis findings, and recommended mitigation strategies.
• Aid the development and use of threat intelligence throughout the service.