SOC Analyst in Warrington

At the heart of everything we do is our vision to change lives every day, and our mission to grow The National Lottery responsibly and champion its impact. We are Allwyn UK, part of the Allwyn Entertainment Group – a multi-national lottery operator with a market-leading presence across the USA and Europe.

The SOC Analyst is responsible for monitoring, investigating, analysing and responding to cyber security events and incidents across the organisation's technology estate. The role forms part of a 24x7 Security Operations Centre and plays a critical role in maintaining cyber threat detection, incident response, operational resilience and information security assurance.

The SOC Analyst serves as the primary operational practitioner within the SOC and is responsible for delivering consistent, high-quality monitoring and investigation activities while supporting continuous service improvement and professional development.

What you’ll be doing

• Security Monitoring & Threat Detection
  • Monitor security monitoring platforms and technologies on a continuous basis.
  • Review, triage and investigate security alerts.
  • Identify indicators of compromise, suspicious activity and potential cyber threats.
  • Escalate validated incidents in accordance with defined procedures.
  • Maintain awareness of current threat activity and attack techniques.
• Cyber Security Incident Response
  • Participate in cyber security incident investigations.
  • Collect, analyse and document relevant evidence.
  • Support containment, eradication and recovery activities where required.
  • Ensure incident records remain accurate and complete.
  • Assist in the preparation of incident reports and post-incident reviews.
• Operational Excellence
  • Follow established playbooks, procedures and security operations processes.
  • Ensure investigations are conducted consistently and accurately.
  • Maintain documentation to required quality standards.
  • Contribute to service continuity across the SOC operating model.
  • Identify opportunities to improve operational processes.
  • Provide feedback on alert quality and detection effectiveness.
  • Contribute to knowledge sharing and operational learning activities.
  • Support implementation of service improvements and new capabilities.
• Professional Development
  • Maintain current knowledge of cyber security threats and technologies.
  • Participate in structured learning and development activities.
  • Work towards development objectives aligned to the SOC Capability & Career Framework.

What experience we’re looking for

• Experience working within a Security Operations Centre, cyber security function or equivalent operational security environment.
• Understanding of cyber security principles, threats and attack methodologies.
• Experience investigating security alerts and incidents.
• Familiarity with SIEM, EDR and security monitoring technologies.
• Understanding of incident management processes.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to work effectively within a shift-based operational environment.
• Experience with Microsoft Defender technologies.
• Experience with Elastic SIEM.
• Familiarity with cloud platforms including AWS and Azure.
• Experience using ServiceNow or similar ticketing platforms.
• Knowledge of threat intelligence frameworks.
• Basic scripting or automation experience.

Working Conditions

• 24x7 shift-based working pattern.
• Participation in weekends, nights and public holiday cover as required.
• Requirement to successfully complete appropriate background screening.
• May be required to support major incidents outside normal duties.

This role forms part of the Security Operations career pathway and provides progression opportunities to Senior SOC Analyst and future specialist pathways through demonstrated capability, performance and professional development.

At Allwyn, we are dedicated to changing lives and growing the National Lottery responsibly, championing its positive impact on people, places, and the planet.

Inclusion and Benefits

• Company Bonus Scheme
• Matched pension contributions up to 8.5%
• 26 days annual leave + 2 Life Days (and bank holidays)
• Single Private Health Cover
• Complimentary Private Medical
• Income Protection
• Flexible Benefits – EV Scheme, Money Coach, Will Writing, Mortgage Advice, Dental and Eye Care Schemes.
• Enhanced Family Leave (Maternity, Paternity, Adoption)
• Wellness Allowance £500
• Employee Assistance Programme
• Discounted Health Assessments
• Matched Funding

We are a Disability Confident Leader which means we’ve taken proactive steps to ensure our workplace is accessible and inclusive for disabled and neurodivergent colleagues and candidates.