Senior SOC Analyst Job at NTT DATA (Birmingham)

Senior SOC Analyst

NTT DATA

Location:
United Kingdom , Birmingham

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Not provided

Save Job

Apply Position

Job Description:

The Senior SOC Analyst will play a crucial role in enhancing security operations by leveraging expertise in SIEM platforms such as Splunk and IBM QRadar. This position requires a minimum of 3-5 years of experience in the IT security industry, preferably within a SOC/NOC environment. The ideal candidate will possess relevant cybersecurity certifications and demonstrate strong analytical and communication skills. Responsibilities include developing analytical rules, incident response playbooks, and conducting threat modeling exercises. The role also involves monitoring security alerts and generating reports for stakeholders.

Job Responsibility:

Deploy, configure, and maintain SIEM platforms (Splunk, QRadar, Sentinel, Defender, Chronicle)
Onboard and normalize log sources across cloud and on-prem environments
Develop and optimize analytical rules for threat detection, anomaly detection, and behavioural analysis
Design and implement incident response playbooks for various threat scenarios (e.g., phishing, lateral movement, data exfiltration)
Integrate playbooks with SOAR platforms (e.g., Microsoft Logic Apps, XSOAR) to automate triage and response
Continuously refine playbooks based on threat intelligence and incident feedback
Monitor and analyse security alerts and events to identify potential threats
Perform in-depth investigations and coordinate incident response activities
Collaborate with threat intelligence teams to enrich detection logic
Conduct threat modelling exercises using frameworks like MITRE ATT&CK, STRIDE, or Kill Chain
Translate threat models into actionable detection use cases and SIEM rules
Prioritize detection engineering efforts based on risk and business impact
Generate reports and dashboards for stakeholders on security posture and incident trends
Work closely with IT, DevOps, and compliance teams to ensure secure system configurations
Provide mentorship and guidance to junior analysts and engineers
Maintain accurate and up-to-date documentation of security procedures, incident response plans, and analysis reports
Support the creation of monthly reporting packs as per contractual requirements
Create and document robust event and incident management processes, Runbooks & Playbooks
Involvement in scoping and standing up new solutions for new opportunities
Assisting Pre-Sales team with requirements on new opportunities
Demonstrations of SOC tools to clients
Continual Service Improvement - Recommendations for change to address incidents or persistent events

Requirements:

Must be able to obtain SC Clearance or already hold SC clearance
SIEM Expertise: Hands-on experience with at least two of the following: Splunk, IBM QRadar, Microsoft Defender for Endpoint, Microsoft Sentinel, Google Chronicle
Strong knowledge of log formats, parsing, and normalization
Experience with KQL, SPL, AQL, or other SIEM query languages
Familiarity with scripting (Python, PowerShell) for automation and enrichment
Deep understanding of threat detection, incident response, and cyber kill chain
Familiarity with MITRE ATT&CK, NIST, and CIS frameworks
Strong verbal and written English communication
Strong interpersonal and presentation skills
Strong analytical skills
Must have good understanding on network traffic flows and able to understand normal and suspicious activities
Must have good understanding of Vulnerability Scanning and management as well as Ethical Hacking (Penetration Testing)
Knowledge of ITIL disciplines such as Incident, Problem and Change Management
Ability to work with minimal levels of supervision
Willingness to work in a job that involves 24/7 on call
Minimum of 3 to 5 years of experience in the IT security industry, preferably working in a SOC/NOC environment
Preferably holds Cyber Security Certification e.g. ISC2 CISSP, GIAC, SC-200, Splunk Certified Admin/Power User, IBM QRadar Certified Specialist, Google Chronicle Security Engineer etc
Experience with Service Now Security suite
Experience with Cloud platforms (AWS and/or Microsoft Azure)
Excellent knowledge of Microsoft Office products, especially Excel and Word

What we offer:

We offer a range of tailored benefits that support your physical, emotional, and financial wellbeing
Our Learning and Development team ensure that there are continuous growth and development opportunities for our people
We also offer the opportunity to have flexible work options

Additional Information:

Job Posted:
April 10, 2026

NTT DATA - All Job Offers

Job Link Share:

Senior SOC Analyst

NTT DATA

Location:
United Kingdom , Birmingham

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:
April 10, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Senior SOC Analyst

Senior Security & Compliance Analyst

Incident Response and SOC Analyst

Senior Security & Compliance Analyst

Senior Cybersecurity Analyst, Threat Hunter

Senior Cybersecurity Incident Response Analyst

Senior Information Security Compliance Analyst

Senior Governance, Risk and Compliance Analyst - Governance