At a Glance
- Tasks: Monitor and investigate security alerts, supporting incident response and operational insights.
- Company: Join a forward-thinking tech company dedicated to cybersecurity excellence.
- Benefits: Enjoy private healthcare, pension contributions, and professional development support.
- Other info: Inclusive recruitment process with guaranteed interviews for applicants with disabilities.
- Why this job: Make a real difference in protecting digital assets while growing your skills.
- Qualifications: 2-4 years in a SOC role with hands-on SIEM experience required.
The predicted salary is between 40000 - 50000 £ per year.
Serves as the operational backbone of the SOC, responsible for day‑to‑day monitoring, triage, investigation, and initial incident response activities. Supports senior team members by handling frontline operations and providing valuable operational insights.
Key responsibilities:
- Monitor, triage, and investigate security alerts across protective monitoring platforms
- Review security event data, identify incidents, and escalate appropriately
- Support incident response activities including containment, eradication, and recovery
- Execute runbooks and contribute to their improvement
- Feed detection tuning recommendations back to the senior
- Coordinate with infrastructure and application teams during incidents under the senior's direction
- Contribute to dashboard monitoring and retrospective analysis
- Help shape the SOC's runbooks, processes, and operational standards as they are developed
Qualifications:
- 2–4 years in a SOC, monitoring, or security analyst role
- Hands‑on SIEM experience and demonstrable alert triage capability
- Working knowledge of AWS security services
- Comfortable with ambiguity (the SOC is being built around them)
- Strong communication skills and ability to collaborate with technical teams
- Degree in a relevant technical field or equivalent professional experience
- At least one entry/mid‑level certification (Security+, CySA+, BTL1, or SC-200)
- SC-cleared or genuinely cleared‑eligible
Nice‑to‑haves:
- Detection authoring experience (writing rules, not just consuming them)
- Scripting ability (Terraform, Python or PowerShell)
- Prior cleared environment experience
- Familiarity with AWS‑native security tooling (GuardDuty, Security Hub, CloudTrail, Detective)
- Additional certifications (GCIA, AWS Certified Security Specialty, vendor‑specific SIEM certs)
Benefits:
- Private Medical Health care via Vitality
- Pension contribution, Life Assurance
- Professional certifications supported as part of learning and development
- A range of retail discounts to enhance your lifestyle, encompassing restaurants, supermarkets, travel, leisure activities and health and well‑being services
- Access to our Employee Resource Groups, which represent diverse backgrounds and provide a platform for colleagues to connect, learn, and support one another
Netcompany is committed to providing an inclusive and barrier‑free recruitment process for anyone wishing to apply for a job with us. We operate a Disability Confident Interview Scheme which means that we offer guaranteed interviews to all applicants with a disability who meet the minimum criteria for a role. Applicants are asked to opt in, so please let us know if you wish your application to be considered under this scheme.
Cyber Security Analyst in Leeds employer: Netcompany Group
Netcompany Group is an excellent employer for a DevOps Engineer, offering a dynamic work culture that fosters collaboration and innovation. With a strong focus on employee growth, you will have access to continuous learning opportunities and the chance to work with cutting-edge technologies in a hybrid environment. The company's commitment to improving software delivery and efficiency ensures that your contributions will be meaningful and impactful.
