SOC Analyst

Join NCC Group's MXDR Team as an L2 SOC Analyst. You'll monitor global systems for potential threats, perform in-depth analysis of security alerts, provide incident remediation and prevention documentation, and act as an escalation point for junior team members. This role is ideal for seasoned SOC Analysts with experience in cybersecurity looking to broaden their skills.

• Monitor global systems for potential threats, vulnerabilities, and indicators of compromise, and perform in-depth analysis of security alerts.
• Provide incident remediation and prevention documentation and recommendations to customers based on defined procedures and analyst experience.
• Act as an escalation point for junior team members, aiding and mentoring where necessary, and contribute to the continuous improvement of SOC procedures and documentation.
• In‑depth knowledge of Windows and Linux operating systems
• Practical experience with security and networking tools such as Microsoft XDR (Sentinel, Defender) and Splunk Enterprise/Cloud/Enterprise Security
• Ability to remain calm and effective during high‑pressure and sensitive security situations
• Hands‑on experience analysing common security incidents and supporting endpoint security
• Strong understanding of network protocols, endpoint detection, and digital forensics
• CompTIA: Security+, Network+, CySA+
• Splunk: Certified User, Power User, Advanced Power User, Enterprise Security Administrator
• CREST: CPSA, CRIA, CMRE, CNIA, CHIA
• If you don’t hear back from us within 10 days, please don’t be too disappointed – we may keep your CV on our database for any future vacancies and we would encourage you to keep an eye on our career opportunities as there may be other suitable roles
• Other relevant certifications
• Microsoft: SC‑200, AZ‑500, AZ‑900, MS‑500
• Cisco: CCNA
• SANS: GCIA, GCIH, GSEC
• CrowdStrike: CCFR, CCFH
• Not mandatory, but a strong advantage if held or equivalent knowledge demonstrated