Security Operations Center Analyst

Key Responsibilities

We are seeking a highly capable DV-cleared SOC Analyst to support continuous security monitoring and threat detection within a mission-critical defence environment aligned to FCAS (Future Combat Air System) security requirements.

This role sits at the centre of cyber defence operations, providing Real Time visibility of security events and working closely with IT, assurance, and security architecture teams to protect highly sensitive systems.

• Monitor SIEM alerts and investigate anomalies, escalating incidents where required.
• Continuously monitor security logs, alerts, and events to identify potential threats or policy violations.
• Validate and maintain SOC access controls to ensure secure and appropriate system access.
• Review and validate SIEM configurations to ensure effective log ingestion and correlation.
• Define and tune alert thresholds to reduce false positives and improve detection quality.
• Support ongoing improvement of SOC monitoring capabilities.
• Coordinate closely with IT Administrators and Security Assurers to support incident response, remediation, and assurance activities.
• Produce weekly SOC dashboards and reporting, providing clear insight into security posture and trends.
• Contribute to operational security discussions and working groups as required.

• Document all SOC activities to support knowledge transfer and operational continuity.
• Package and manage all SOC artefacts and deliverables for sharing with FCAS Security.
• Support audits, assurance reviews, and compliance activities through accurate reporting and evidence provision.

• Proven experience as a SOC Analyst or in a security monitoring role within secure environments.
• Strong experience working with SIEM platforms, security logging, and alert investigation.
• Understanding of access control models and SOC operational processes.
• Ability to analyse security events and communicate findings clearly to technical and non-technical stakeholders.
• Experience in defence, aerospace, or other highly regulated sectors is highly desirable.

• DV clearance is mandatory and must be current and transferable.

• Be part of a high-assurance cyber defence operation protecting nationally significant programmes.
• Work in a collaborative environment alongside experienced cyber professionals.
• Opportunity to shape and mature SOC capabilities within a complex, secure setting.