Job Search

We are seeking an IT SOC Analyst to monitor, investigate and respond to security events across a dynamic technology environment. Working as part of a security operations team, you will provide first-line analysis of alerts, identify potential threats and support the timely containment and resolution of incidents. You will use security information and event management (SIEM), endpoint detection and response (EDR), vulnerability management and other monitoring tools to assess suspicious activity and maintain effective security visibility.

Your responsibilities will include triaging alerts, analysing log data, investigating phishing attempts, malware detections, unauthorised access and other indicators of compromise. You will document findings clearly, escalate incidents in line with defined procedures and contribute to incident response activities, including evidence gathering, root-cause analysis and post-incident reporting. The role will also involve maintaining accurate case records, supporting threat-hunting activities, reviewing security controls and helping to improve monitoring rules, playbooks and operational processes. You may participate in an on-call or shift-based rota to support continuous security monitoring.

Applicants should have practical experience in a security operations, incident response, infrastructure or related IT role, together with a sound understanding of networking, operating systems, authentication, common attack techniques and cybersecurity principles. Experience with SIEM platforms, EDR solutions, ticketing systems, vulnerability scanners and cloud security tooling is desirable. Relevant certifications such as Security+, SSCP, CySA+ or equivalent training would be advantageous. You should be analytical, methodical and able to prioritise effectively in a fast-paced environment, with strong written and verbal communication skills. A commitment to ongoing learning, careful handling of sensitive information and the ability to work collaboratively with technical and non-technical colleagues are essential.

We are seeking an IT SOC Engineer to support the operation, monitoring, and continuous improvement of a Security Operations Centre. This role will be responsible for identifying, investigating, and responding to security events across networks, endpoints, cloud environments, and business applications. You will work closely with infrastructure, service management, and information security teams to protect systems and data, reduce risk, and maintain a strong security posture.

Key responsibilities include monitoring security alerts and logs using SIEM, endpoint detection and response, vulnerability management, and other security tools; triaging and investigating suspicious activity; documenting incidents and maintaining accurate case records; and escalating confirmed or high-impact threats in line with established procedures. You will assist with containment, remediation, and recovery activities, contribute to post-incident reviews, and help develop playbooks, detection rules, dashboards, and operational procedures. The role will also involve supporting threat hunting, identifying opportunities to improve alert quality, assisting with security testing, and producing clear technical reports for relevant stakeholders.

Applicants should have practical experience in a SOC, security engineering, incident response, or a similar IT security environment. You will need a sound understanding of networking, operating systems, authentication, email security, common attack techniques, and security event analysis. Experience with SIEM platforms, EDR tools, firewalls, vulnerability scanners, cloud security controls, and scripting or automation would be advantageous. Strong analytical and problem-solving skills are essential, together with the ability to prioritise work, communicate clearly, and remain calm during incidents. Relevant security certifications or demonstrable equivalent experience are welcomed. This is an opportunity to develop your technical expertise while contributing to a proactive, collaborative, and continually improving security function.