Lead Senior SOC Analyst in Hemel Hempstead

Are you ready to take the next step in your career as a SOC Analyst? We are growing our Cyber Security Operation and this could be your opportunity to join us as we build out our offering to existing and new customers. This role will offer the opportunity to make a real difference in the world of Cyber defence. If you are looking for an opportunity with Cyber Security with more responsibility and the chance to lead and mentor a team, this could be for you! Our Cyber team look after some complicated and compelling areas within Aero, Defence and Security. If you want to lead from the front, gain experience working with multiple clients, and always have access to the latest technologies, then join the team who are on the cusp of continued growth and known as leaders in their field.

Location and Shift

This role is based on site in Hemel Hempstead and is shift work. 2 x days at 6am to 6pm, 2 nights at 6pm to 6am, 4 days off. Eligibility requires DV clearance.

Responsibilities

• Monitor, triage, and investigate security incidents on critical client infrastructure.
• Perform in-depth analysis of network traffic, logs and system events to identify potential security threats and vulnerabilities.
• Maintain, improve and develop team knowledge of SOC tools, security operations and triage.
• Analyse and improve detection rules and use cases in line with Mitre Att&ck and threat-informed defence.
• Maintain and update security incident documentation, including incident reports, analysis findings and recommended mitigation strategies.
• Represent the SOC within partners meetings.

Qualifications

• Demonstrable experience in Security Operations Centre.
• People management experience to help develop Analysts and lead careers.
• Demonstrable experience of using Microsoft Sentinel and Splunk.
• Knowledge and experience with Mitre Att&ck Framework.
• Solid grasp of client-server applications, multi-tier web applications, relational databases, firewalls, VPNs and enterprise anti-virus products.
• Good understanding of networking principles including TCP/IP, WANs, LANs and commonly used Internet protocols such as SMTP, HTTP, FTP, POP, LDAP.

It would be great if you had:

• Static malware analysis and reverse engineering.
• Programming and scripting such as Python, Perl, Bash, PowerShell, C++.
• CREST Practitioner Intrusion Analyst/Blue Teams Level 1 or other SOC related certifications.
• Experience with SIEM technologies, namely Sentinel and Splunk, with some experience with QRadar.

Company Overview

Sopra Steria's Aerospace, Defence and Security business designs, develops and deploys digital solutions to Central Government clients. The work we do makes a real difference to the client’s goal of National Security, and we operate in a unique and privileged environment. We are given time for professional development activities, and we coach and mentor our colleagues, sharing knowledge and learning from each other. We foster a culture in which employees feel valued and supported and have pride in their work for the customer, delivering outstanding rates of customer satisfaction in the UK’s most complex safety-and security-critical markets.

Equal Opportunity

We welcome applications from people with a diverse variety of backgrounds and identities. We are committed to equality of opportunity for all and do not discriminate on the basis of race, religion, colour, gender, age, disability, sexual orientation or marital status. If you require any adjustments to the recruitment process, to enable you to perform to the best of your ability, please let us know when completing your application. We participate in the Disability Confident scheme and are committed to offering an interview to any candidate with a disability who meets the minimum criteria for the role.