SOC Analyst in Swindon

This role sits within the Detect & Respond sub-team of the Group Security Operations Centre, under the Cyber Security tower in Security & Resilience.

What you’ll be doing

Working with the team you will be analysing and responding to security events as they surface, making initial judgements as to possible severity, seeking support and guidance where needed, and escalating or developing mitigation recommendations to help defend our systems and data. Your role will often require close collaboration with other parts of the business to help identify, enable, and drive the right investigation steps and response actions. The GSOC defends the whole of Nationwide and Virgin Money’s estate, both Member-facing and support capabilities, requiring engagement and communication with both technical and non-technical teams across the business. You’ll help mature our internal processes, developing or defining appropriate detection, response and containment capabilities as well as contributing to the GSOC Strategy. You will help shape our future technology direction, suggesting and assisting with innovative ways to combat contemporary cyber threats so we remain fit to find and confront malicious activity.

Responsibilities

• You’ll be handling cyber security alerts from triage through to closure, making and evidencing high quality decisions and escalating where appropriate.
• There will be opportunities to play a supporting role in Incident Response activities to enable the prompt identification, investigation and mitigation of threats, acting across various roles and responsibilities to achieve cyber risk reduction in cloud, hybrid and on-premises environments.
• You’ll be expected to identify potential service improvements to enable GSOC Detect & Respond to operate more effectively and efficiently, providing feedback and taking ownership to deliver improvement activities where appropriate.
• Supporting BAU operational demands, including process/playbook development, use case review, and the collection and production of Management Information.
• This role will require you to work closely with other teams across S&R, TOCs and COO to drive positive security outcomes.

Qualifications

• Experience of working within a Cyber Security (e.g., SOC, Cyber Incident Response, Penetration Testing) or IT (e.g. Service Desk, Sysadmin) role.
• A problem-solving mindset, with the ability to use structured and analytical approaches.
• Demonstrable knowledge of basic IT concepts, including but not limited to Networking, Hardware, Operating Systems & Cloud Computing.
• Working knowledge of core Cyber Security concepts and tooling, and the ability to apply this understanding to investigations.
• The ability to build good working relationships with both technical and business stakeholders, gaining their respect and trust based on your knowledge and professionalism.
• The ability and desire to quickly learn new technologies.

It’s a bonus if you have but not essential

• CompTIA Security+ (or equivalent Defensive Security certification).
• CompTIA Network+ (or equivalent Networking certification).
• Certified Ethical Hacker (or equivalent Offensive Security certification).
• MS SC-200 (or equivalent Security Tooling certification).

Benefits

• 25 days holiday per year, increasing over time to 30. Plus, an option to buy more.
• Private medical insurance.
• A highly competitive pension.
• Access to an annual performance-related bonus.
• Training and development to help you progress your career.
• A great selection of additional benefits through our flexible benefits scheme.
• Life assurance to provide peace of mind for you and your loved ones.
• Up to 2 days of paid volunteering a year.

If we’re lucky to receive a lot of interest, we may close the advert early. Please ensure to submit your applications as soon as possible.

At Virgin Money, we celebrate everyone. We have fun, think big, and relentlessly include each other, all in pursuit of our purpose: Banking – but fairer, more rewarding, and for the good of society. We’re committed to creating an inclusive culture where colleagues feel safe and inspired to contribute, speak up and be heard.