- Type
- Full-time
- Seniority
- Senior
- Closing date
- Today
- Source
- Vincere
Description
We have a great opportunity with one of our Government Departments for a Senior Security Operations Centre (SOC) Analyst to support the operation and continual improvement of the organisation's Security Operations Centre (SOC).
Working closely with the Managed Service Provider (MSP), internal technical teams and system owners, you will play an important role in monitoring, identifying, investigating and responding to cyber security threats and incidents.
The role combines hands-on security operations with technical and governance oversight of the SOC service provider, alongside a focus on strengthening detection capabilities, improving SIEM processes and driving continual operational improvements.
- Provide technical and governance oversight of the Managed Service Provider, ensuring services meet contractual obligations, service levels, security requirements and operational standards.
- Review and uplift Security Information and Event Management (SIEM) processes, including log source onboarding, monitoring health checks and operational procedures.
- Work with internal teams, system owners and the MSP to address logging gaps and improve detection rules and use cases.
- Monitor and investigate cyber security threats and incidents, documenting findings, follow-up actions and lessons learned.
- Collaborate with internal teams and the MSP to investigate and respond to cyber security incidents.
- Enrich investigations using contextual data, indicators of compromise (IOCs) and attacker tactics, techniques and procedures (TTPs).
- Conduct and review threat hunting activities in response to emerging threats.
The role is an initial 12 month contract with opportunity for extension, this role is a senior analyst so we are looking for people with current SOC Analysis experience.
Contact [email protected] for more information.