Senior SOC Analyst - Sentinel

Job Description

Job Description

Senior SOC Analyst - plus 20% shift allowance (Standard Hours the first 4 months before moving to 4 on, 4 off shift x 12 hours)

Location: Hybrid - Birmingham (1 day every 2 weeks)

*** Due to the nature of the work, must hold or be able to acquire Security Clearance (SC) - 5 years UK Address History *** 

Must be willing to work shifts after 6 months which are likely to be 4 x 12 hour shifts (4 on, 4 off) 

Must have worked in an MSSP (Managed Services Organisation) environment, managing or dealing with multiple clients. 

MUST HAVE Microsoft Sentinel

We are looking for a candidate with previous experience working in a SOC Analyst role. Ideally you will have been exposed to a mixture of tools and technologies, including Microsoft Sentinel and Google SecOps. You will have gained knowledge and extensive experience in investigating alerts and incidents, containing and remediating potential security threats and dealing with customer enquiries.

Key responsibilities

1. Triage security events and incidents.
2. Monitor the SIEM to identify anomalies and potential security threats.
3. Monitor the health of the SIEM and other critical components within the infrastructure.
4. Participate in evaluating the security of monitored infrastructure systems and take part in recommending additional security solutions where appropriate.
5. Communicate with external teams for incident resolution.
6. Participate in security incident management and vulnerability management processes.
7. Communicate effectively with customers, teammates, and management.
8. Follow & improve internal guidelines, playbooks and practices for management of incidents and changes.
9. Document and maintain security procedures and processes.
10. Build & deliver customer service reviews.

Required skills and qualifications

1. Security monitoring experience with one or more SIEM technologies, ideally Microsoft Sentinel and/or Google SecOps.
2. Strong understanding of Windows, Linux and cloud technologies.
3. Good understanding of security solutions including SIEMs, Web Proxies, Anti-Virus, Firewalls, VPN, authentication providers and mechanisms, encryption, IPS/IDS.
4. Good understanding of security incident management, malware management and vulnerability management processes.
5. Experience of working in a MSSP SOC environment. 
6. Attention to detail and quality.

Desirable skills and qualifications

1. CREST Practitioner Intrusion Analyst (CPIA)
2. Microsoft Security Operations Analyst (SC-200)
3. Security Blue Team Level 1 (BTL1)

Qualifications

Additional Information