Senior SOC Analyst

YOU MUST HAVE ACTIVE DV CLEARANCE
Senior SOC Analyst
£75 per hour
12 Hour shifts (7am-7pm & 7pm-7am)
7 Days & 7 Nights over a 4-week pattern
6 month contract initially
Buckinghamshire
Summary - The 4x Senior SOC Analysts will be responsible for the operational leadership of the Security Monitoring function, ensuring the consistent delivery of high-quality security monitoring, investigation and escalation activities.
Responsibilities

• Monitor theorganisationstechnology estate toidentifycyber security events, suspicious activity and indicators of compromise using approved monitoring platforms and analytical tools.
  
• Independently investigate security alerts and complex cyber security events,determiningtheir significance, potentialimpactandappropriate courseofactions.
  
• Correlate information from multiple data sources toestablishattack timelines,identifyaffectedsystemsand support the assessment of cyber security incidents.
  
• Analyseindicators of compromise, attackertechniquesand available threat intelligence todeterminethe nature and severity of security events.
  
• Escalate indicatorsconfirmed or suspected cyber security incidentsto the Lead SOC Analyst or Incident Responder teamin accordance withestablished operational procedures.
  
• Support Incident Responders by providingaccurateanalyticalfindings, supporting evidence,timelinesand technical information throughout incident investigations.
  
• Contribute to the continual improvement of monitoring capability byidentifyingopportunities to improve alert quality, investigation processes, monitoringcoverageand detection effectiveness.
  
• Validate new monitoring content, detectionrulesand operational procedures beforedeploymentinto the live SOC environment.
  
• Assistin the onboarding of new systems, cloudservicesand application into SOC monitoring byvalidatingoperational visibility and monitoring effectiveness.
  
• Maintainaccurateinvestigationsrecords, ensuring all analytical activities are fully documentedin accordance withorganisationalprocedures.
  
• Share knowledge,providetechnicalguidanceand support the development of Practitioner SOC Analysts through coaching and day-to-day mentoring.
  
• Contribute to operational reviews, lessonsidentifiedand post-incident activities, recommending improvements tomonitoringcapability and operational processes.
  
• Maintain awareness of emerging cyber threats, attackertechniquesand monitoring technologies to support continual professional development and improved operational effectiveness

Required Skills / Experience

• The Senior SOC Analyst should demonstrable knowledge and skills in the areas:Cyber security operations, Forensics,Incident management, incident investigation and response, Information risk assessment and risk management,Intrusion detection analysis, Protective security, Secure operations management, Threat intelligence and threat assessment
• Experience working within a SOC or comparable cyber security operations environment.
• Experience investigating cyber security alerts and security events using enterprise monitoring techniques.
• Good knowledge of SIEM platforms, security monitoring tools and log analysis techniques.
• Understanding of cyber attack methodologies, indicators or compromise, threat intelligence and common attacker techniques.
• Experience analysing information from multiple technical sources to investigate cyber security events.
• Experience supporting cyber incident response activities.
• Strong analytical and problem-solving skills with the ability to made sound technical judgements.
• Good written and verbal communication skills with the ability to produce accurate technical reports and investigation findings.
• Ability to work effectively within a shift-based 24/7 environment.
• Professional certifications such as Microsoft SC-200, CompTIA CySA+, GIAC, GCIA or equivalent

Desirable:

• Experience using Microsoft Sentinel, LogRhythm, or equivalent enterprise SIEM platforms.
• Experience developing monitoring improvements, detection tuning, or operational process development.
• Experience supporting Incident Responder activities during major cyber security incidents.
• Experience contributing to the development of monitoring use cases and detection improvements.
• Applied knowledge of MITRE ATT&CK or equivalent adversary behaviour frameworks.