Security Operations Center Analyst

About the role

The Security Operations Center (SOC) Analyst will join a global IT services team that supports major organisations in their digital transformation. You will work on real‑time security monitoring, detection and response across multiple entry channels, helping to protect customers' cloud and on‑premise environments.

Key responsibilities

• Perform proactive, real‑time monitoring of security events via SIEM, tickets, email and phone.
• Categorise incoming events, conduct checklist‑based investigations and raise incidents after quality checks.
• Escalate incidents based on severity to Tier 2 specialists, service support teams or customers.
• Collaborate with Tier 2 and core support to resolve incidents and provide detailed documentation.
• Participate in incident and vulnerability management processes and suggest SOC process improvements.
• Contribute to tuning and optimisation of security tools, correlation rules and whitelist requests.

Required profile

• Foundational understanding of TCP/IP, VPN, proxies and firewalls.
• Comfortable with Linux and Windows operating systems from a security perspective.
• Knowledge of common cyber threats such as phishing, scanning, malware and vulnerability exploitation.
• Basic understanding of cloud authentication mechanisms (SSO, MFA, least‑privilege).
• Experience with security monitoring concepts, time‑trend analysis and log/metric evaluation.

Required skills

• SIEM, IDS/IPS, EDR and anti‑virus tools.
• Scripting or programming in Bash, PowerShell or Python.
• Microsoft Office applications.
• Case management and ticketing systems.