Negotiable
Inside
Onsite
Milton Keynes, UK
Summary: The role of Senior SOC Analyst involves leading a team of SOC Analysts in a fully onsite capacity, requiring active SC or ideally DV clearance. The position operates on a 24/7 shift rota, including weekends and bank holidays, and is based in either Milton Keynes or Glasgow. Candidates must possess or be eligible for DV vetting, with a focus on monitoring security tools and responding to incidents in a security-cleared environment.
Key Responsibilities:
- Continuous Monitoring: Monitor security tools, including SIEM systems, to detect suspicious activity and respond efficiently to potential threats.
- Incident Triage: Analyze alerts and logs to determine the nature of security incidents, following established procedures for classification and prioritization.
- Initial Incident Response: Perform initial containment actions for confirmed incidents and escalate to Level 2 or 3 analysts for further investigation.
- Reporting and Documentation: Create detailed tickets and reports for all detected incidents, documenting findings and actions taken.
- Tool Management: Assist in the maintenance and optimization of security tools to ensure their effectiveness.
Key Skills:
- Experience with SPLUNK in a Security Operations Centre (SOC).
- Bachelor's degree in computer science, Cyber Security, or relevant experience.
- Foundational understanding of networking concepts (TCP/IP, DNS), operating systems (Windows, Linux), and common cyber-attack techniques.
- Certifications like CompTIA Security+, Cybersecurity Analyst (CySA+), or similar are a significant bonus.
Salary (Rate): £650 pd
City: Milton Keynes
Country: UK
Working Arrangements: on-site
IR35 Status: inside IR35
Seniority Level: Mid-Level
Industry: IT
Senior SOC Analysts Lead SOC Analysts with active SC or ideally DV clearance. Fully onsite working on a 24/7 shift rota.
Must be eligible/for DV vetting - Single British Nationality required by our government services client in Milton Keynes or Glasgow
Rate 610-650 pd Inside IR35 - Umbrella Company
Working in an DV (Developed Vetting) Security cleared environment. You will hold a current DV or SC Security Clearance, or be eligible to undertake.
The role requires working as part of a 24/7 shift pattern.
This pattern will include weekends and bank holidays.
Skills and Experience Required:
Experience of SPLUNK with in a Security Operations Centre (SOC).
A bachelor's degree in computer science, Cyber Security or relevant experience
You should have a foundational understanding of networking concepts (TCP/IP, DNS, etc.), operating systems (Windows, Linux), and common cyber-attack techniques.
Certifications like CompTIA Security+, Cybersecurity Analyst (CySA+), or a similar certification are a significant bonus to the role
Key Responsibilities
Continuous Monitoring: You will monitor security tools, including Security Information and Event Management (SIEM) systems, to detect suspicious activity. You will be the first to see potential threats and will need to be efficient and professional response against defined processes.
Incident Triage: You will analyse alerts and logs to determine if an event is a genuine security incident or a false positive. You will need to be methodical and follow established procedures to classify and prioritize incidents.
Initial Incident Response: For confirmed incidents, youll perform initial containment actions, such as isolating affected systems, and escalate the incident to a Level 2 or 3 analyst for deeper investigation.
Reporting and Documentation: You'll create detailed tickets and reports for all detected incidents, documenting your findings and the steps you took. This is crucial for tracking incidents and for future analysis.
Tool Management: You will assist in the maintenance and optimization of security tools, ensuring they are working correctly and effectively.
Please apply on line in the first instance
SmartSourcing are a Disability Confident Employer and we promote, celebrate and value diversity, we are committed to promoting equality and inclusion for all.