NCC Group

Global cyber security and resilience provider

SOC Analyst

Security Operations & Incident ResponseUpdated on Nov 13

Full-timeNo salary listedRemote

About the Job

Requirements

Experience in a Security Operations Center or cyber security operations role.
Hands-on experience with Splunk Enterprise Security and security monitoring tools.
Understanding of network security, endpoint security, and common attack techniques.
Familiarity with incident response processes and threat intelligence.
Candidates must hold active SC clearance due to the nature of the work and client requirements.

Responsibilities

Monitor security events and alerts through Splunk Enterprise Security.
Investigate and triage security incidents in accordance with established procedures.
Perform threat detection, log analysis, and event correlation.
Escalate significant security incidents to senior analysts and management.
Assist with threat hunting and vulnerability remediation activities.
Create and maintain incident documentation and reports.
Contribute to the development of SIEM use cases and SOC playbooks.

Desired Qualifications

Relevant certifications such as Security+, Splunk Certified User, or equivalent.

We are looking for a proactive SOC Analyst to monitor, detect, investigate, and respond to cyber security threats using the Splunk Enterprise Security toolset. The role will support the organisation's security operations by analysing alerts, investigating incidents, and helping strengthen cyber defence capabilities

Monitor security events and alerts through Splunk Enterprise Security.
Investigate and triage security incidents in accordance with established procedures.
Perform threat detection, log analysis, and event correlation.
Escalate significant security incidents to senior analysts and management.
Assist with threat hunting and vulnerability remediation activities.
Create and maintain incident documentation and reports.
Contribute to the development of SIEM use cases and SOC playbooks

Experience in a SOC or cyber security operations role.
Hands-on experience with Splunk Enterprise Security and security monitoring tools.
Understanding of network security, endpoint security, and common attack techniques.
Familiarity with incident response processes and threat intelligence.
Relevant certifications such as Security+, Splunk Certified User, or equivalent are desirable.

Note: due to the nature of the work and client requirements, we can only consider candidates with active SC clearance.

About the Company

NCC Group

Global cyber security and resilience provider

NCC Group provides cyber security and resilience services to organizations and governments around the world. It helps protect digital systems by offering a range of capabilities such as security testing, risk assessment, and resilience planning, backed by a global team of experts and supported by technology-enabled tools. The company’s approach combines human expertise with technical solutions to identify vulnerabilities, assess risk, and implement concrete steps to improve security and continuity. What sets NCC Group apart is its large, worldwide team and its emphasis on practical, end-to-end cyber resilience—working with clients from assessment through to implementation and ongoing assurance. The goal is to create a more secure digital future by helping customers manage cyber risk, reduce threats, and maintain business continuity at scale.

Company size: 1,001-5,000
Company stage: IPO
Headquarters: Manchester, United Kingdom
Founded: 1999

Recently Posted Jobs

Explore more opportunities at NCC Group

See more jobs