Job Description

We’re looking for experienced SOC Analysts to join a highly capable security operations team supporting sensitive, mission-critical environments. This is a hands-on senior role with real ownership: leading analysts, shaping SOC capability, and operating at the sharp end of UK national security.

Key Responsibilities

• Monitor systems for security alerts, incidents, anomalies, and indicators of compromise
• Review, design, and continuously improve security controls in a complex, evolving technical environment
• Contribute to the development and delivery of RBAC, IAM, and Access Management services
• Produce regular security and service reports for senior stakeholders
• Deliver security awareness and briefing sessions for users, stakeholders, and visitors (including onboarding briefings)
• Support security campaigns and provide clear, actionable security communications
• Maintain and assess security certifications and governance frameworks, including ISO 27001
• Provide ongoing security guidance and operational support to users and technical teams
• Work closely with the Operational Security Manager to mature and evolve SOC capability
• Stay current with emerging threats, attack techniques, and defensive best practice
• Research and contribute to the continuous improvement of security operations as a discipline

Required Experience & Skills

• 3+ years’ experience in a SOC or closely related cyber security role
• Strong working knowledge of:
• SIEM platforms
• Security Incident Management
• Cloud environments
• Networking fundamentals
• Threat intelligence and threat hunting
• Information security principles
• Phishing, ransomware, and modern attack vectors
• Identity & Access Management (IAM)
• Joiners, Movers, and Leavers (JML) processes
• ITSM policies and operational procedures
• Information classification and handling
• Experience mentoring, managing, or developing junior analysts
• Comfortable operating in high-assurance, highly regulated environments

Qualifications

• CISMP, CompTIA Security+, or equivalent cyber security certifications (desirable)
• Must hold active SC clearance as a minimum security requirement - DV welcome!