Strong analytical skills with experience in monitoring and triaging security incidents., Proficiency in EDR and SIEM technologies, along with knowledge of Windows and Linux forensic techniques., Excellent interpersonal skills to communicate technical issues to non-technical stakeholders., Certifications such as CompTIA Security+ and Blue Team Level 1 are advantageous..
Key responsabilities:
Respond to system alerts and conduct in-depth investigations on security events in a 24/7 SOC environment.
Assist the pen test team with web app and configuration reviews to enhance knowledge and experience.
Provide remote incident response and forensic activities during security incidents using DFIR methodologies.
Produce reports for customers and offer expert-level advice on security matters.
Report This Job
Help us maintain the quality of our job listings. If you find any issues with this job post, please let us know.
Select the reason you're reporting this job:
The Outline is a new kind of publication, built for the modern world. Our goal is to tell you the most fascinating stories about power, culture, and the future every single day — and to tell those stories in a truly different way.
Our client is at the forefront of cybersecurity in the UK, providing exceptional services and innovative solutions tailored to our clients' needs. As part of our ambitious growth plans, we are seeking an experienced SOC Analyst to enhance our dynamic team.
Job Role:
You possess strong analytical skills with experience monitoring and triaging security incidents utilising a strong foundation in networking principles. You excel in client-facing roles with the ability to adjust communication styles for different audiences. Your proactive attitude towards learning and flexibility in work approach, coupled with your passion for security with an enjoyment in solving problems make you a perfect candidate for this role.
Roles and Responsibilities:
Respond to system generated alerts, analyse logs and traffic patterns and carry out in-depth investigation on security events supporting our 24/7 SOC.
Assist the pen test team with web app, external tests and configuration reviews to gain experience and knowledge
Respond to security incidents by following predefined procedures, including containment, eradication, and recovery.
Provide remote incident response and forensic activities during security incidents using DFIR methodologies.
Produce reports to customers
Provide expert level advice to customers
Assist in tuning and configuring systems to improve detection capabilities and reduce false positives.
Use a variety of security tools and technologies, such as endpoint detection and response (EDR), network traffic analysis (NTA), and threat intelligence platforms.
About you:
Knowledge of Windows and Linux host based forensic artefacts and techniques
Experience with EDR and SIEM technologies
Proficiency in monitoring security events, analysing alerts, and managing security incidents, including incident prioritization and escalation.
Excellent interpersonal skills with the ability to explain technical problems to non-technical business stakeholders at all levels.
Understanding of networking and infrastructure design
Knowledge of malware capabilities, attack vectors and impact.
Knowledge of the MITRE ATT&CK framework to understand threat actors and how to mitigate them.
Certifications (very advantageous):
Blue Team Level 1
CompTIA Security+
CompTIA Network+
Preferred Certifications
SANS GCIH (GIAC Certified Incident Handler)
SANS GCIA (GIAC Certified Intrusion Analyst)
SANS GCFA (GIAC Certified Forensic Analyst)
SANS GCFE (GIAC Certified Forensic Examiner)
SANS GNFA (GIAC Network Forensic Analyst)
Alignment with Our Values
Our core values—Consistently Dependable, Beyond Excellence, Paving New Pathways, and Charismatic Engagement—shape our culture and our actions. We are looking for someone who embodies these principles, bringing not only skill and expertise but also a commitment to reliability, the pursuit of excellence, innovation in cybersecurity, and engaging with charisma in every interaction.
We are proud to be a people-first organisation. We offer a flexible, supportive environment and are keen to hear from talented individuals ready to join our journey. If you are looking to make a significant impact in the cyber security field, apply today to become part of our team!
Required profile
Experience
Spoken language(s):
English
Check out the description to know which languages are mandatory.