Cyber Security Analyst

Location: London (On-site Shift Pattern)

Salary: Up to £70,000 + On-Call Allowance + Benefits

Security Clearance: Active SC Clearance required (Must be a British National and eligible to obtain higher levels of UK security clearance)

Check all associated application documentation thoroughly before clicking on the apply button at the bottom of this description.

We're working with a leading organisation supporting critical national security programmes, who are looking to recruit an experienced Security Analyst to join their 24/7 Security Operations Centre (SOC)

You'll play a key role in monitoring, detecting and responding to cyber security threats across complex enterprise environments, working with industry-leading technologies including Elastic and Splunk. This is an excellent opportunity for someone who thrives in a fast-paced operational environment and enjoys working on high-profile, mission-critical systems.

Key Responsibilities

• Monitor security alerts and events across enterprise environments using Elastic and Splunk
• Investigate, triage and respond to security incidents in line with established playbooks and SLAs
• Perform threat hunting and proactive analysis to identify malicious activity.
• Analyse logs from endpoints, networks, cloud services and security tools to detect suspicious behaviour
• Escalate incidents where appropriate and work closely with engineering and incident response teams
• Develop and improve SIEM detection rules and alert tuning to reduce false positives
• Produce clear incident reports and maintain accurate documentation
• Participate in the on-call rota and support major incident response when required
• Contribute to the continuous improvement of SOC processes, tooling and operational procedures

Skills & Experience

• Experience working within a 24/7 Security Operations Centre (SOC) or equivalent cyber security environment
• Strong hands-on experience using Elastic and/or Splunk for security monitoring and investigations
• Good understanding of SIEM technologies, log analysis and threat detections
• Knowledge of security frameworks xwzovoh such as MITRE ATT&CK and the Cyber Kill Chain
• Experience investigating phishing, malware, endpoint, identity and network security incidents
• Familiarity with Windows, Linux, Active Directory and cloud environments (AWS, Azure or Microsoft 365)
• Strong analytical and problem-solving skills with the ability to make decisions under pressure
• Excellent written and verbal communication skills

Essential Require

• Active SC Clearance
• British National, with eligibility to obtain higher levels of UK security clearance
• Willingness to work a 24/7 rotating shift pattern (4 days on rotation)
• Able to work from the London office as required