Back to search
SOC Analyst
Based in Preston/Filton/Frimley (Hybrid working)
35,000 - 42,000 per annum
Must be eligible for SC Clearance
What you'll be doing:
- Working as part of a team safeguarding against cyber threats by developing and enhancing the Technical Operations capability across People, Process, and Technology, ensuring an efficient approach to all Cyber Operations
- Continuously working toward organisational, departmental, and individual objectives and upholding security standards and principles
- Supporting the identification and creation of automations and integrations
- Proactively normalising and cleansing data for SIEM and SOAR consumption
- Supporting other SOC capabilities with data consumption and interpretation
- Create dashboards to normalise key security analytic data to present to key stakeholders
- Ensuring data sources adhere to enterprise logging standards, utilising SIEM and SOAR technologies
- Applying methodical and logical approach to use large datasets to construct actionable information to enhance the detection of suspicious activity
Your skills and experiences:
Essential:
- Understanding of enterprise networking and computing
- A proven technical background with a detailed knowledge of cyber security, computer networks and operating systems
Desirable:
- Knowledge of using SIEM platforms to identify suspected security events and creating content to enhance the platform
- Demonstrable experience in using SOAR tooling and its application
- Broad and detailed experience of technologies including but not limited to firewalls, IDS/IPS, Active Directory, endpoint protection, Windows Server, Linux, TCP/IP, Networks, Cloud, CDN's, Vulnerability Management
- Knowledge of Python 3 programming language
