Salary: Up to £45,000 (depending on experience)
CTA are working with a Cyber Security company who are for a SOC Analyst (L2) to join their growing Security Operations Centre. This role is ideal for a junior analyst looking to build hands‑on experience in monitoring, triaging, and responding to security incidents in a fast‑paced, shift‑based environment.
Key Responsibilities
- Advanced Security Monitoring: Analyse SIEM alerts, logs, and security events to identify and respond to complex threats.
- Incident Response: Lead investigations, perform deep analysis, determine impact, and coordinate response activities.
- Threat Detection & Analysis: Develop and refine detection rules and use cases to improve threat visibility.
- Threat Hunting: Proactively hunt for advanced threats and indicators of compromise across the environment.
- Vulnerability Management: Identify, assess, and prioritise vulnerabilities and recommend remediation actions.
- Security Reporting: Produce detailed reports on incidents, trends, and overall security posture.
- Process Improvement & Automation: Enhance SOC processes, playbooks, and automation capabilities.
Skills & Experience
- Strong experience with SIEM platforms (e.g., Microsoft Sentinel, Sumo Logic)
- Hands‑on experience with EDR/XDR tools (e.g., CrowdStrike, Microsoft Defender)
- Solid understanding of:
- Incident response lifecycle
- Networking protocols (TCP/IP, DNS, HTTP/S)
- Experience analysing logs from multiple sources (endpoints, network, cloud)
- Ability to independently investigate and resolve security incidents
- Scripting or automation experience (e.g., Python, PowerShell) is a plus
- Strong communication and stakeholder management skills
What You’ll Be Doing
- Acting as an escalation point for Level 1 analysts
- Working closely with customers and internal teams on incident investigations
- Tuning detection rules and improving alert quality
- Staying up to date with emerging threats, vulnerabilities, and attack techniques
- Supporting and mentoring junior analysts
Requirements
- UK Citizenship (required due to the nature of the role)
If you are looking for a progressive move with an established Cyber company, please do send your application through for consideration.
#J-18808-Ljbffr