SOC Analyst (Shift Work - UK Based SC Cleared/Clearable)

Job Description

SOC Analyst 

Location: Hybrid - Birmingham 

Due to the nature of the work, must hold or be able to acquire Security Clearance (SC). 

Must be willing to work Shifts to cover 24/7 SOC functions

Must have worked in an MSSP environment, managing or dealing with multiple clients. 

We are looking for a candidate with previous experience working in a SOC Analyst role. Ideally you will have been exposed to a mixture of tools and technologies, including Microsoft Sentinel and Google SecOps. You will have gained knowledge and extensive experience in investigating alerts and incidents, containing and remediating potential security threats and dealing with customer enquiries.

Key responsibilities

1. Triage security events and incidents.
2. Monitor the SIEM to identify anomalies and potential security threats.
3. Monitor the health of the SIEM and other critical components within the infrastructure.
4. Participate in evaluating the security of monitored infrastructure systems and take part in recommending additional security solutions where appropriate.
5. Communicate with external teams for incident resolution.
6. Participate in security incident management and vulnerability management processes.
7. Communicate effectively with customers, teammates, and management.
8. Follow & improve internal guidelines, playbooks and practices for management of incidents and changes.
9. Document and maintain security procedures and processes.
10. Build & deliver customer service reviews.

Required skills and qualifications

1. Security monitoring experience with one or more SIEM technologies, preferably Microsoft Sentinel and/or Google SecOps.
2. Strong understanding of Windows, Linux and cloud technologies.
3. Good understanding of security solutions including SIEMs, Web Proxies, Anti-Virus, Firewalls, VPN, authentication providers and mechanisms, encryption, IPS/IDS.
4. Good understanding of security incident management, malware management and vulnerability management processes.
5. Experience of working in a MSSP SOC environment. 
6. Attention to detail and quality.

Desirable skills and qualifications

1. CREST Practitioner Intrusion Analyst (CPIA)
2. Microsoft Security Operations Analyst (SC-200)
3. Security Blue Team Level 1 (BTL1)