SOC Analyst

Network IT; West Midlands Combined Authority; Remote; GBP 80,000 - 100,000

Job description

Role: SOC Analyst

Location: Fully Remote (UK)

Hours of Work: 12-Hour Shifts, 4 On – 4 Off

Salary: £35,000 - £37,000

Network IT are supporting an MSSP in finding a SOC Analyst to join their established and mature Security Operations Centre (SOC) team. Successful candidates in this role will have gained foundational experience in a Security Operations role, who are looking to specialise in Microsoft-focused security services (MS Sentinel and MS Defender). Our client offers comprehensive training and support and will push for you to gain Microsoft security certifications (e.g. SC-200).

Ultimately, our client is looking for someone who is proactive with a hunger to develop, someone who is actively exploring Cyber Security outside their normal role responsibilities or during their own time, and has gained and is continuing to work towards building their security certifications.

Responsibilities:

1. Monitor and respond to security alerts from a variety of security and IT tools (e.g. Microsoft Sentinel).
2. Proactively analyse security alerts to detect anomalous behaviour and identify potential threats.
3. Prioritise alerts according to their criticality, tackling threats in the first instance and escalating when required.
4. Limit business disruption from malicious activity, contain and eradicate malicious activity from information systems.
5. Operate SIEM tools to high efficiency, providing suggestions for continuous improvement through creation and tuning of SIEM rules.
6. Documentation of incidents and investigations.
7. Research the latest on security/cyber threats, which can drive improvements with existing tools and processes.

Experience:

1. 12-months experience working within a Security Operations Centre (SOC).
2. Hands-on experience with Security Incident and Event Management (SIEM) tools (e.g. Azure Sentinel, MS Defender, Splunk, SentinelOne, CrowdStrike).
3. Familiarity with Endpoint Detection and Response (EDR) tools.
4. Relevant SOC/Cyber Security certifications (e.g. Blue Team Level 1, SC-900, CompTIA Security+, CompTIA Network+).
5. Proactive attitude towards developing in Cyber Security.