SOC Analyst

As a L2 SOC Analyst at NCC Group, you join a 24/7 global Security Operations Centre to monitor, detect, and respond to cyber threats. You’ll work with the Unified Cyber Platform and Microsoft/Splunk tools to analyse alerts and support clients. The role combines hands-on detection with escalation and guidance to junior staff, shaping robust incident response. You will contribute to SOC process improvements and deliver value-driven security services to customers.

• Flexible Working
• 25 days holiday + bank holidays
• Medicash & Critical Illness Scheme
• Pension, Life Assurance, and Share Save Scheme
• Volunteer opportunities
• Green Car Scheme

• Monitor global systems for threats, vulnerabilities and indicators of compromise
• Analyse security alerts using UCP and underlying detection platform
• Provide incident remediation and prevention guidance to customers
• Document and follow security monitoring procedures
• Deliver customer service that exceeds expectations
• Initiate escalation to counteract threats and threat actors
• Compile and review service-focused reports
• Act as escalation point for junior team members and mentor where needed
• Contribute to continuous improvement of SOC procedures and documentation
• Perform other SOC duties as assigned

• Practical experience with security and networking tools such as Microsoft XDR (Sentinel, Defender) and Splunk Enterprise/Cloud/Enterprise Security
• Strong understanding of network protocols, endpoint detection, and digital forensics
• In-depth knowledge of Windows and Linux operating systems
• Hands-on experience analysing common security incidents and supporting endpoint security
• Ability to remain calm and effective during high-pressure and sensitive security situations

• Customer service orientation
• Mentoring and leadership capability
• Calmness under pressure and composure in high-stress situations
• Microsoft XDR (Sentinel, Defender)
• Splunk Enterprise/Cloud/Enterprise Security
• Understanding of network protocols