Level 1 SOC Analyst - MSP

We are partnered with a well-established UK technology provider with roots stretching back over two decades. They specialise in delivering managed IT, security, connectivity and unified communications solutions that help organisations stay productive, secure and future-ready. From cloud and cyber security to voice, contact centre tools and comprehensive IT support, they empower customers across sectors with tailored, reliable technology that drives growth and efficiency.

Join their front line of cyber defence as a Level 1 SOC Analyst, where you’ll play a vital role in monitoring and responding to real‑time security threats across diverse client environments. This is an ideal opportunity for someone with foundational cybersecurity or IT support experience who wants to accelerate their career in threat detection and incident response. You’ll work with cutting‑edge tools such as Microsoft Sentinel, Defender XDR, Crowd Strike Falcon, Rapid7, and Microsoft Defender for Endpoint, while learning directly from experienced analysts in a supportive, growth‑focused environment.

If you’re looking for hands‑on exposure to live security operations, mentorship to fast‑track your development, and the chance to make a real impact in protecting clients from evolving cyber threats, this role is for you.

• Monitor and triage security alerts across SIEM, EDR, XDR, and other detection technologies.
• Investigate potential security incidents and elevate in line with established processes.
• Collaborate with senior analysts and threat response teams to resolve incidents efficiently.
• Maintain detailed documentation of investigations, incidents, and actions taken.
• Provide guidance and support to clients on incident handling and mitigation.
• Support the creation and tuning of detection rules, threat‑hunting queries, and analytics.
• Stay current on emerging threats, attacker behaviours, and new security technologies.

• Experience with SIEM platforms (e.g., Microsoft Sentinel, Rapid7) and log analysis.
• Ability to query and interpret log data; familiarity with KQL is beneficial.
• Exposure to EDR tools such as Crowd Strike, Microsoft Defender for Endpoint, or Carbon Black.
• Understanding of malware behaviour, IoCs, and basic analysis techniques.
• Knowledge of networking fundamentals (TCP/IP, DNS, HTTP/S, SMB, RDP) and core security concepts (IDS/IPS, firewalls, VPNs).
• Familiarity with cloud security monitoring, especially in Microsoft Azure.
• Degree in Cybersecurity/IT or equivalent practical experience.
• Strong attention to detail, process‑driven approach, and excellent written and verbal communication.
• Willingness to work in a collaborative, shift‑based SOC environment.
• Security‑minded, ethical attitude with a desire to continuously learn.

• CompTIA Security+
• Microsoft SC-200
• Security Blue Team – BTL1

• Career progression pathways into threat hunting, incident response, engineering, or senior SOC roles.
• Hands‑on experience with industry‑leading security tools and real‑world incidents.
• Mentorship from experienced analysts to accelerate your development.
• Support for certifications and ongoing professional training.
• A collaborative, high‑growth environment with access to diverse client environments.

• £32,500 + 15% shift allowance