SOC Analyst; L2

Salary:
Up to £45,000 (depending on experience)

CTA are working with a Cyber Security company who are for a SOC Analyst (L2) to join their growing Security Operations Centre. This role is ideal for a junior analyst looking to build hands‑on experience in monitoring, triaging, and responding to security incidents in a fast‑paced, shift‑based environment.

• Advanced Security Monitoring:
  Analyse SIEM alerts, logs, and security events to identify and respond to complex threats.
• Incident Response:
  Lead investigations, perform deep analysis, determine impact, and coordinate response activities.
• Threat Detection & Analysis:
  Develop and refine detection rules and use cases to improve threat visibility.
• Threat Hunting:
  Proactively hunt for advanced threats and indicators of compromise across the environment.
• Vulnerability Management:
  Identify, assess, and prioritise vulnerabilities and recommend remediation actions.
• Security Reporting:
  Produce detailed reports on incidents, trends, and overall security posture.
• Process Improvement & Automation:
  Enhance SOC processes, playbooks, and automation capabilities.

• Strong experience with SIEM platforms (e.g., Microsoft Sentinel, Sumo Logic)
• Hands‑on experience with EDR/XDR tools (e.g., Crowd Strike, Microsoft Defender)
• Solid understanding of:
• Incident response lifecycle
• Networking protocols (TCP/IP, DNS, HTTP/S)
• Experience analysing logs from multiple sources (endpoints, network, cloud)
• Ability to independently investigate and resolve security incidents
• Scripting or automation experience (e.g., Python, Power Shell) is a plus
• Strong communication and stakeholder management skills

• Acting as an escalation point for Level 1 analysts
• Working closely with customers and internal teams on incident investigations
• Tuning detection rules and improving alert quality
• Staying up to date with emerging threats, vulnerabilities, and attack techniques
• Supporting and mentoring junior analysts

• UK Citizenship (required due to the nature of the role)

If you are looking for a progressive move with an established Cyber company, please do send your application through for consideration.