Commercial SOC Analyst

Job Title:
Commercial SOC Analyst

Reporting to:
Head of SOC

Location:
Remote

Hours of Work: 12 Hour shift pattern, day and night shifts including working weekends and public holidays

Future requirement to join on-call rota

We are looking for a Cyber Security Analyst to join our Remote Security Operations Centre (SOC). You will ideally have some hands‑on experience within a commercial SOC environment and a solid understanding of cyber security principles, threat detection, and incident response. We would also welcome applications from individuals who can demonstrate a genuine passion for cyber security, a proactive mindset, and a strong desire to help protect both our customers and our internal environments from evolving cyber threats.

The Role:

You are going to be responsible for triaging, investigating, classifying, and managing cyber security incidents. We collect log data from any sources our customers require reactive monitoring of, along with deploying agents to provide proactive protection.

You will need to be comfortable with managing multiple simultaneous tasks, at different stages, each with their own priorities across different customers. You’ll have a team to support you along with time to develop yourself.

Once you’ve identified an event which requires our customer to be alerted, you’ll follow defined processes to raise this. You will also need to provide our customers with support to help prevent any damage to them and ensure that it doesn’t happen again.

We have Threat Intelligence feeds which will aide you in keeping up to date with the latest tools, techniques, and procedures. You will also use this intelligence to proactively hunt for threats and create or update existing detection rules.

This role, in addition to protective monitoring, will involve Vulnerability Management and asset discovery, including configuring custom scans and dashboards. You will be required to ensure that our vulnerability scanning service remains a valuable asset to our customers by providing contextualised information and analysis. You will have team support to achieve this.

As a team we’re always lookingtoraise the bar, learn new thingsand incorporate new technologiesandyou willtoo!

You’llshareyour knowledge with the team and the wider

Cyberfortcommunity,contributing to Group blogs and undertaking research related to technology enhancements.

Responsibilities:

• Perform event triage and incident analysis

• Provide advice and guidance in the event of a cyber security breach

• Help maintain documentation owned by the CSOC team including but not limited to Standard Operating Procedures (SOPs)

• Assist with/own ad-hoc requests (within reason)

• Remain current on cyber security trends and intelligence

• Identify opportunities to automate processes within the CSOC

• Stakeholder and Client Reporting (incident reports and vulnerability management)

Nice to have (any of these):

• Programming/scripting skills

• Experience in operational security

• Experience in Systems administration (Linux/Windows)

• Experience in open-source threat intelligence

• General IT practices

• General security practices and knowledge

• IT Service Management basics (ITIL)

• Knowledge of:

  • Cyber threats and vulnerabilities

  • Adversarial tactics, techniques, and procedures

  • Incident response and handling methodologies

  • Risk management processes

  • IT architecture and operations (computing, network, storage & cloud)

  • Computer networking concepts and protocols, and network security methodologies

  • Responding to audit and regulatory requirements

  • Familiarization of the MITRE ATT&CK Framework.

• Ability to work nights, weekends, and/or holidays in the event of an incident response emergency

At Cyberfort, we’re committed to creating an environment where our people can do their best work, develop…