Senior SOC Analyst

<p class="text-muted mb-3">YOU MUST HAVE ACTIVE DV CLEARANCE</p>

<p class="text-muted mb-3">Senior SOC Analyst</p>

<p class="text-muted mb-3">£75 per hour</p>

<p class="text-muted mb-3">12 Hour shifts (7am-7pm & 7pm-7am)</p>

<p class="text-muted mb-3">7 Days & 7 Nights over a 4-week pattern</p>

<p class="text-muted mb-3">6 month contract initially</p>

<p class="text-muted mb-3">Buckinghamshire</p>

<p class="text-muted mb-3">Summary - The 4x Senior SOC Analysts will be responsible for the operational leadership of the Security Monitoring function, ensuring the consistent delivery of high-quality security monitoring, investigation and escalation activities.</p>

<p class="text-muted mb-3">Responsibilities</p>

<p class="text-muted mb-3">Monitor the organisation’s technology estate to identify cyber security events, suspicious activity and indicators of compromise using approved monitoring platforms and analytical tools. </p>

<p class="text-muted mb-3">Independently investigate security alerts and complex cyber security events, determining their significance, potential impact and appropriate course of actions. </p>

<p class="text-muted mb-3">Correlate information from multiple data sources to establish attack timelines, identify affected systems and support the assessment of cyber security incidents. </p>

<p class="text-muted mb-3">Analyse indicators of compromise, attacker techniques and available threat intelligence to determine the nature and severity of security events. </p>

<p class="text-muted mb-3">Escalate indicators confirmed or suspected cyber security incidents to the Lead SOC Analyst or Incident Responder team in accordance with established operational procedures. </p>

<p class="text-muted mb-3">Support Incident Responders by providing accurate analytical findings, supporting evidence, timelines and technical information throughout incident investigations. </p>

<p class="text-muted mb-3">Contribute to the continual improvement of monitoring capability by identifying opportunities to improve alert quality, investigation processes, monitoring coverage and detection effectiveness. </p>

<p class="text-muted mb-3">Validate new monitoring content, detection rules and operational procedures before deployment into the live SOC environment. </p>

<p class="text-muted mb-3">Assist in the onboarding of new systems, cloud services and application into SOC monitoring by validating operational visibility and monitoring effectiveness. </p>

<p class="text-muted mb-3">Maintain accurate investigations records, ensuring all analytical activities are fully documented in accordance with organisational procedures. </p>

<p class="text-muted mb-3">Share knowledge, provide technical guidance and support the development of Practitioner SOC Analysts through coaching and day-to-day mentoring. </p>

<p class="text-muted mb-3">Contribute to operational reviews, lessons identified and post-incident activities, recommending improvements to monitoring capability and operational processes. </p>

<p class="text-muted mb-3">Maintain awareness of emerging cyber threats, attacker techniques and monitoring technologies to support continual professional development and improved operational effectiveness</p>

<p class="text-muted mb-3">Required Skills / Experience</p>

<p class="text-muted mb-3">The Senior SOC Analyst should demonstrable knowledge and skills in the areas: Cyber security operations, Forensics, Incident management, incident investigation and response, Information risk assessment and risk management, Intrusion detection analysis, Protective security, Secure operations management, Threat intelligence and threat assessment </p>

<p class="text-muted mb-3">Experience working within a SOC or comparable cyber security operations environment. </p>

<p class="text-muted mb-3">Experience investigating cyber security alerts and security events using enterprise monitoring techniques. </p>

<p class="text-muted mb-3">Good knowledge of SIEM platforms, security monitoring tools and log analysis techniques. </p>

<p class="text-muted mb-3">Understanding of cyber attack methodologies, indicators or compromise, threat intelligence and common attacker techniques. </p>

<p class="text-muted mb-3">Experience analysing information from multiple technical sources to investigate cyber security events. </p>

<p class="text-muted mb-3">Experience supporting cyber incident response activities. </p>

<p class="text-muted mb-3">Strong analytical and problem-solving skills with the ability to made sound technical judgements. </p>

<p class="text-muted mb-3">Good written and verbal communication skills with the ability to produce accurate technical reports and investigation findings. </p>

<p class="text-muted mb-3">Ability to work effectively within a shift-based 24/7 environment. </p>

<p class="text-muted mb-3">Professional certifications such as Microsoft SC-200, CompTIA CySA+, GIAC, GCIA or equivalentDesirable:</p>

<p class="text-muted mb-3">Experience using Microsoft Sentinel, LogRhythm, or equivalent enterprise SIEM platforms.</p>

<p class="text-muted mb-3">Experience developing monitoring improvements, detection tuning, or operational process development.</p>

<p class="text-muted mb-3">Experience supporting Incident Responder activities during major cyber security incidents.</p>

<p class="text-muted mb-3">Experience contributing to the development of monitoring use cases and detection improvements.</p>

<p class="text-muted mb-3">Applied knowledge of MITRE ATT&CK or equivalent adversary behaviour frameworks</p>