Soc Analyst Job at Randstad (Birmingham)

New

Soc Analyst

Location

India , Kochi

Salary:

Not provided

Mantle Solutions

Expiration Date

Until further notice

Requirements

Bachelor's degree in Computer Science or related field
Certifications such as CEH, Security+, CySA+, CHFI, or other recognized cybersecurity credentials are highly recommended
1-2 years of relevant experience in cybersecurity
Experience monitoring SIEM and responding to security alerts
Strong understanding of Cybersecurity Operations and Incident Response
Knowledge of SIEM, XDR, EDR Solutions
Understanding of network security concepts, protocols, and attack techniques
Familiarity with MITRE ATT&CK Framework
Strong analytical and troubleshooting skills
Excellent verbal and written communication skills

Job Responsibility

Monitor security alerts and events generated by SIEM, XDR, EDR, IDS/IPS, WAF, Email Security, and other security solutions
Analyze and investigate security incidents, alerts, and suspicious activities
Perform incident triage, classification, containment, eradication, and recovery activities
Escalate critical incidents according to the Incident Response Plan
Document incident findings and remediation actions
Conduct threat hunting activities to identify potential threats within the environment
Analyze malware, phishing attempts, and suspicious network activities
Review threat intelligence feeds and apply relevant indicators for monitoring
Monitor log ingestion and data quality across security platforms
Create, fine tune, and maintain SIEM rules and use cases

Fulltime

SOC Analyst

The SOC Analyst is a frontline, shift‑based role operating within a 24/7 Securit...

Location

United Kingdom , Birmingham

Salary:

Not provided

NTT DATA

Expiration Date

Until further notice

Requirements

Foundational understanding of cyber security concepts, including TCP/IP networking, common log sources, and basic attack techniques
Comfortable working with a SIEM platform such as Splunk, Microsoft Sentinel, or an equivalent tool
Basic knowledge of common operating systems including Windows, Linux, and macOS
Strong analytical and problem-solving skills
Clear written and verbal communication skills
Ability to work calmly and effectively in a shift-based operational environment
Ability to follow procedures and work with minimal supervision
Awareness of scripting, query languages, or rule-based detection is advantageous but not required
Experience or strong interest in cyber security or IT operations
Entry-level or foundation cyber security certifications desirable (CySA+, SC-200)

Job Responsibility

Continuously monitor security alerts, logs, and event data across customer and internal environments, identifying suspicious or malicious activity
Triage and analyze alerts to determine whether they represent potential security or service incidents, and prioritize them
Conduct first-line investigations using SIEM, SOAR, and supporting security tools, validating alerts, gathering relevant evidence, and assessing initial impact and severity
Recognize successful or unsuccessful attack attempts and escalate appropriately to senior analysts or incident responders
Support incident containment and remediation activities by following runbooks and customer guidance
Create and maintain incident tickets, record investigation steps and findings, and produce clear incident summaries
Contribute to post-incident reviews by sharing findings and identifying opportunities for improvement
Apply threat intelligence provided by the SOC to support alert analysis and investigations
Follow defined SOC procedures, documentation standards, and shift-handover processes
Participate fully in the 24/7 shift rota

What we offer

Tailored benefits that support physical, emotional, and financial wellbeing
Continuous growth and development opportunities
Flexible work options

Fulltime

SOC Analyst

As a SOC Analyst, you will support the protection of Vodafone customer environme...

Location

United Kingdom , Farnborough

Salary:

Not provided

Vodafone

Expiration Date

Until further notice

Requirements

Experience working in a Security Operations Centre or similar operational environment
Ability to interpret and analyse logs and alerts from IT, network, and security systems
Experience with SIEM technologies such as Huntsman, Securonix, or Splunk
Foundational knowledge of IT and network security concepts (e.g. Windows, firewalls, IPS, web proxy, email security)
Demonstrated interest in cyber security and the evolving threat landscape, with a willingness to learn and develop
Be able to maintain Customer confidentiality and ability to hold Developed Vetting (DV) level security clearance

Job Responsibility

Monitor Security Information and Event Management (SIEM) platforms and associated security tooling to identify potential security threats and incidents
Perform initial triage and investigation of security alerts, assessing severity, credibility, and impact in line with SOC procedures
Escalate security incidents accurately and within agreed service levels, ensuring high-quality handovers between shifts and to senior analysts
Monitor managed security services including firewalls and intrusion prevention systems, identifying anomalous or suspicious activity
Raise and manage incident tickets, liaising professionally with internal teams and external customers, and contribute to security reporting where required

What we offer

Excellent basic salary plus bonus and Vodafone benefits
Up to 28 days off plus bank holidays
Paid time for charity work
Discounts
Vouchers
Pension plan
Parental leave policies

Fulltime

Soc Analyst

Location

United Kingdom , Cambridge

Salary:

Not provided

Roku

Expiration Date

Until further notice

Requirements

Strong understanding of SIEM, EDR, cloud security services (e.g., AWS GuardDuty), and various security technologies
Experience in automation and development of automated playbooks and associated processes in security orchestration, automation and response (SOAR) environments
Experience in the creation of incident response plans and leading incident response efforts and post incident reporting when required
Threat intelligence, knowledge of tactics, techniques, and procedures (TTPs) utilised by threat actors and how to generate and deploy mitigation strategies
Vulnerability management, monitoring, reporting and engagement with necessary stakeholders to ensure timely remediation
Can demonstrate strong understanding of network security principles and encryption technologies
Experience of security change management processes and procedures
Demonstrate experience of risk assessment and advisory capabilities on both internal systems and products/solutions from third party vendors (SaaS, AI etc)
Experience in contributing to the development, implementation and management of security policies and procedures
Strong knowledge of security frameworks and industry best practices – such as ISO 270001, NIST, PCI-DSS and others

Job Responsibility

Supporting the design and implementation of information security systems and frameworks including threat prevention, detection and mitigation tools
Manage, maintain and optimize security information and event management (SIEM) platforms and associated security infrastructure
Detect and respond to information security incidents, investigate security incidents, identify attack vectors, and lead containment/eradication/recovery efforts
Create detailed incident reports, lead post-incident reviews, document lessons learned, and contribute to compliance reporting
Hunt for undetected threats, tune security tools, refine detection rules, and address false positives
Vulnerability management, analysis, oversee the vulnerability management lifecycle and reporting, support prioritization and advise relevant stakeholders on vulnerability status and postures
Identify risks in new and existing projects and environments and support the implementation of necessary security controls to meet business needs
Support the implementation of security orchestration, automation and response (SOAR) playbooks and procedures in order to improve response times and ensure consistent approach to incidents
Provide mentorship and support to more junior analysts, act as escalation point for complex issues
Support in testing and evaluation of security products and solutions

What we offer

Global access to mental health and financial wellness support and resources
healthcare (medical, dental, and vision)
life, accident, disability, commuter, and retirement options (401(k)/pension)

Fulltime

SOC Analyst

Piper Companies is seeking a SOC Analyst to join a growing cybersecurity organiz...

Location

United States , Raleigh

Salary:

115000.00 - 135000.00 USD / Year

Piper Companies

Expiration Date

Until further notice

Requirements

Active Secret security clearance (required)
3+ years of experience in a Security Operations Center (SOC) or similar security role
Heavy hands-on experience with Splunk, including alerting, dashboards, and log analysis
Strong understanding of security events, incident response, and threat detection techniques
Experience analyzing network, system, and application logs

Job Responsibility

Monitor, triage, and investigate security alerts using Splunk and other SIEM tools
Analyze logs, network traffic, and endpoint data to identify potential threats and vulnerabilities
Respond to security incidents, including containment, eradication, and recovery activities
Create, tune, and maintain Splunk dashboards, alerts, and correlation searches
Document incidents, findings, and response actions in accordance with security policies and procedures
Collaborate with security engineers and stakeholders to improve SOC processes and detection capabilities
Support continuous improvement of security monitoring and incident response workflows

What we offer

medical
dental
vision
401(k)
PTO

Fulltime

Soc Analyst

Zachary Piper Solutions is seeking a skilled SOC Analyst to support a critical i...

Location

United States , Mclean

Salary:

110000.00 - 170000.00 USD / Year

Piper Companies

Expiration Date

Until further notice

Requirements

Active TS/SCI Full Scope Polygraph
3-8+ years of related experience with cyber security, network security, and/or network engineering
Must have active IAT II certification (Security+ CE, GIAC Security Essentials Certification (GSEC), CySa+, CEH, CISM, etc.)
Working knowledge of current COTS Cybersecurity technologies/ SIEMs (i.e. Splunk, Wireshark, Arcsight)
Experience using MITRE ATT&CK and Cyber Kill Chain methodologies
Experience with network intrusion detection system/prevention systems (IDS/IPS)
Experience with network and host malware detection and prevention (EDR)
Familiarity with one of the following programming languages preferred (Python, JavaScript, Yara, Snort)

Job Responsibility

Detect, identify, and report possible cyber-attacks, intrusions, anomalous activities, and misuse activities
Analyze network traffic and system data to identify unusual activity and potential threats
Conduct cyber incident triage to determine scope, urgency, and potential impact
identify specific vulnerabilities and recommend quick remediation measures
Track and document cyber incidents from initial detection to final resolution
Assess and analyze damage to data and infrastructure resulting from cyber incidents
Perform trend analysis and reporting on cyber incidents

What we offer

PTO
Paid Holidays
Sick leave as required by state laws
Medical
Dental
Vision
401k
Training & development opportunities
certification reimbursement
Long term program

Fulltime

SOC Analyst

Location

India , Hyderabad

Salary:

Not provided

NTT DATA

Expiration Date

Until further notice

Requirements

Should have at least 6+ years of experience in SOC
Seasoned experience in SOC Analysis Operations
Seasoned experience in SIEM usage for investigations
Seasoned experience in Security technologies such as (but not limited to) Firewall, IPS, IDS, Proxy
Seasoned experience in dealing with technical support to clients
Seasoned experience in handling security incidents end to end
Seasoned experience in configuring/managing security controls, such as SIEM, Firewall, IDS/IPS, EDR, NDR, UTM, Proxy, SOAR, Honeypots and other security tools
Seasoned experience in Security Analysis or Engineering preferably gained within a global services organization

Job Responsibility

Works as part of a global Cyber Defense Centre (CDC) team that works 24/7 on rotational shifts
Works with client stakeholders and relevant internal teams to tune the MSSP platform and client SIEM to enable more efficient detection, analysis and reporting
Monitors security tools to review and analyse security logs from client environments
Generates continuous improvement ideas for supported security tools/technologies, to enable improvements to the company services, employee experience and client experience
Adheres to SOPs, customer Run Books, and standard processes to ensure a globally consistent delivery whilst also proposing changes and improvements to these standards
Utilizes and documents best practices and amends existing documentation as required
Identifies opportunities to make automations which will help the clients and security delivery teams
Performs security incident handling and response from several vectors including End Point Protection and Enterprise Detection and response tools, attack analysis, malware analysis, network forensics, computer forensics
Utilizes a broad range of skills in LAN technologies, Windows and Linux O/Ss, and general security infrastructure
Ensures usage of knowledge articles in incident diagnosis and resolution and assists with updating as and when required

Fulltime

SOC Analyst

Join Vodafone Business Security Enhanced and strengthen the cyber security of th...

Location

United Kingdom , Farnborough

Salary:

Not provided

Vodafone

Expiration Date

Until further notice

Requirements

Experience working in a Security Operations Centre or similar operational environment
Ability to interpret and analyse logs and alerts from IT, network, and security systems
Experience with SIEM technologies such as Huntsman, Securonix, or Splunk
Foundational knowledge of IT and network security concepts (e.g. Windows, firewalls, IPS, web proxy, email security)
Demonstrated interest in cyber security and the evolving threat landscape, with a willingness to learn and develop
Be able to maintain Customer confidentiality and ability to hold Developed Vetting (DV) level security clearance

Job Responsibility

Monitor Security Information and Event Management (SIEM) platforms and associated security tooling to identify potential security threats and incidents
Perform initial triage and investigation of security alerts, assessing severity, credibility, and impact in line with SOC procedures
Escalate security incidents accurately and within agreed service levels, ensuring high-quality handovers between shifts and to senior analysts
Monitor managed security services including firewalls and intrusion prevention systems, identifying anomalous or suspicious activity
Raise and manage incident tickets, liaising professionally with internal teams and external customers, and contribute to security reporting where required

What we offer

Great pay, bonuses, up to 28 days off plus bank holidays, and paid time for charity work
Discounts, vouchers, a pension plan and loads more
Amazing learning tools and top-notch parental leave policies

Fulltime

Select Country

Soc Analyst

Job Description

Job Responsibility

Requirements

Looking for more opportunities?

Soc Analyst

Soc Analyst

SOC Analyst

SOC Analyst

Soc Analyst

SOC Analyst

Soc Analyst

SOC Analyst

SOC Analyst

Our AI answers in your language