SOC Analyst
About this role
The key to good security is a clear understanding of what is most critical to the business. When you do not have enough internal resources, time, or skills to monitor and manage your IT environment 24/7, NCC Group can help, freeing up your skilled employees to focus on value-add activities.NCC Group provides a range of managed and hosted services delivered from our Global Security Operations Centre (SOC), which operates 24/7, 365 days a year. Our team of over 100 accredited security experts is available around the clock, dealing daily with over 200 million log events and providing support for thousands of network devices.NCC Group’s MXDR Team provides world-class Extended Detection and Response (XDR) services, detecting, responding to, and mitigating cyber-attacks on our customers' networks in our Security Operations Centres. We use a plethora of detection tools such as the Microsoft Security Stack, Splunk, EDR, IDS & IPS tools, and many more, all integrated with NCC Group's Unified Cyber Platform (UCP).The MXDR Team is looking for L2 SOC Analysts with a passion for security to join the team, helping customers get the most out of our services and protect their networks. This is an opportunity to join a technically advanced and talented team and help NCC Group build and deliver world-class services to our customers.This role is ideal for a seasoned SOC Analyst with experience in cybersecurity looking to broaden their scope of cyber skills with a strong focus on detection and response to cyber incidents. Monitor global systems for potential threats, vulnerabilities, and indicators of compromise.Perform in-depth analysis of security alerts utilising both NCC Group's UCP and explore further using the underlying detection platform where necessary.Provide incident remediation and prevention documentation and recommendations to customers based on defined procedures and analyst experience.Document and adhere to processes related to security monitoring procedures.Provide customer service that always exceeds our customers’ expectations.Initiate escalation procedures to counteract potential threats, vulnerabilities, and threat actors.Compile and review service-focused reports.Act as an escalation point for junior team members, aiding and mentoring where necessary.Contribute to the continuous improvement of SOC procedures and documentation.Perform other SOC duties as assigned. Core Technical Skills & ExperiencePractical experience with security and networking tools such as Microsoft XDR (Sentinel, Defender) and Splunk Enterprise/Cloud/Enterprise SecurityStrong understanding of network protocols, endpoint detection, and digital forensicsIn‑depth knowledge of Windows and Linux operating systemsHands‑on experience analysing common security incidents and supporting endpoint securityAbility to remain calm and effective during high‑pressure and sensitive security situationsDesirable CertificationsNot mandatory, but a strong advantage if held or equivalent knowledge demonstrated.Microsoft: SC‑200, AZ‑500, AZ‑900, MS‑500Splunk: Certified User, Power User, Advanced Power User, Enterprise Security AdministratorCrowdStrike: CCFR, CCFHCREST: CPSA, CRIA, CMRE, CNIA, CHIACompTIA: Security+, Network+, CySA+Cisco: CCNASANS: GCIA, GCIH, GSECOther relevant certifications Flexible Working: Balance your work and personal life with our flexible working options.Generous Holiday Allowance: Enjoy 25 days of holiday, plus bank holidays, with the option to buy up to 5 additional days of annual leave differs for SOC shift workers, please speak to your TA partner for more information). Medicash & Critical Illness SchemeFinancial & Investment Benefits: Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme.Community & Volunteering Programmes: Make a difference in your community with our volunteering opportunities.Green Car Scheme: Drive green and save money with our eco-friendly car scheme.Cycle Scheme: Stay fit and healthy with our cycle-to-work scheme.Special Time Off: Take time off for those big moments in life, like getting married/entering into a civil partnership, becoming a grandparent, and welcoming home a new pet.Family Planning: Benefit from our generous maternity and paternity leave, as well as time off and support for those undergoing fertility treatments.
What this role is, and what else it is called
Employers in Manchester advertise this kind of work as Director, Information & Application Security, Head of Information Security and GRC, Experienced Fire / Security Engineer and Fire & Security Engineer (Manchester) too, so it is worth searching more than one wording. It is a mid-level Cybersecurity role in Manchester, advertised as fully remote, so it is open to candidates working from home.
About hiring at Nccgroupplc
Nccgroupplc has 6 other live technology roles on its careers page, across Cybersecurity, Cloud & IT Infrastructure and Enterprise Applications. Of those, 14% are advertised as fully remote and 86% as hybrid. Elsewhere in its adverts Nccgroupplc asks for Azure, AWS, SQL, Microsoft 365 and VMware. See all Nccgroupplc roles, salaries and stack.
How this role compares to the market
610 live UK roles list Linux right now, from 230 employers. The median advertised salary is £65,000; 24% are advertised as remote. Browse Linux roles.
237 live UK roles list Cisco right now, from 75 employers. The median advertised salary is £40,000; 18% are advertised as remote. Browse Cisco roles.
Manchester has 330 live IT vacancies across 135 employers, with a median advertised salary of £40,000. Browse Manchester roles.
Market figures are today's snapshot of live UK roles on employer careers pages; see hiring trends.
Technologies mentioned
Detected on Nccgroupplc's careers page. ProdReady Recruitment lists this vacancy as an aggregator and is not the employer; applications go to the employer's own site. More IT jobs in North West.