SOC Analyst

NCC Group

1d•Hybrid

About The Position

NCC Group's Global Security Operations Centre (SOC) operates 24/7, 365 days a year, providing managed and hosted services. Our team of over 100 accredited security experts handles millions of log events daily and supports thousands of network devices. The MXDR Team specializes in Extended Detection and Response (XDR), detecting, responding to, and mitigating cyber-attacks. We utilize a variety of detection tools, including the Microsoft Security Stack, Splunk, EDR, and IDS & IPS tools, all integrated with NCC Group's Unified Cyber Platform (UCP). We are seeking L2 SOC Analysts with a passion for security to join our technically advanced and talented team. This role is ideal for a seasoned SOC Analyst with cybersecurity experience, focusing on detection and response to cyber incidents, who is looking to broaden their scope of cyber skills.

Requirements

Practical experience with security and networking tools such as Microsoft XDR (Sentinel, Defender) and Splunk Enterprise/Cloud/Enterprise Security
Strong understanding of network protocols, endpoint detection, and digital forensics
In‑depth knowledge of Windows and Linux operating systems
Hands‑on experience analysing common security incidents and supporting endpoint security
Ability to remain calm and effective during high‑pressure and sensitive security situations

Nice To Haves

Microsoft Certifications: SC‑200, AZ‑500, AZ‑900, MS‑500
Splunk Certifications: Certified User, Power User, Advanced Power User, Enterprise Security Administrator
CrowdStrike Certifications: CCFR, CCFH
CREST Certifications: CPSA, CRIA, CMRE, CNIA, CHIA
CompTIA Certifications: Security+, Network+, CySA+
Cisco Certifications: CCNA
SANS Certifications: GCIA, GCIH, GSEC
Other relevant certifications

Responsibilities

Monitor global systems for potential threats, vulnerabilities, and indicators of compromise.
Perform in-depth analysis of security alerts utilising both NCC Group's UCP and explore further using the underlying detection platform where necessary.
Provide incident remediation and prevention documentation and recommendations to customers based on defined procedures and analyst experience.
Document and adhere to processes related to security monitoring procedures.
Provide customer service that always exceeds our customers’ expectations.
Initiate escalation procedures to counteract potential threats, vulnerabilities, and threat actors.
Compile and review service-focused reports.
Act as an escalation point for junior team members, aiding and mentoring where necessary.
Contribute to the continuous improvement of SOC procedures and documentation.
Perform other SOC duties as assigned.

Benefits

Flexible Working options
25 days of holiday, plus bank holidays
Option to buy up to 5 additional days of annual leave
Medicash & Critical Illness Scheme
Pension
Life Assurance
Share Save Scheme
Volunteering opportunities
Green Car Scheme
Cycle-to-work scheme
Special Time Off for life events (marriage/civil partnership, becoming a grandparent, welcoming a new pet)
Generous maternity and paternity leave
Time off and support for fertility treatments