SOC Analyst, NCC Group

• Practical experience with security and networking tools such as Microsoft XDR (Sentinel, Defender) and Splunk Enterprise/Cloud/Enterprise Security
• Strong understanding of network protocols, endpoint detection, and digital forensics
• In‑depth knowledge of Windows and Linux operating systems
• Hands‑on experience analysing common security incidents and supporting endpoint security
• Ability to remain calm and effective during high‑pressure and sensitive security situations
• If you don’t hear back from us within 10 days, please don’t be too disappointed – we may keep your CV on our database for any future vacancies and we would encourage you to keep an eye on our career opportunities as there may be other suitable roles

Desirable

• NCC Group’s MXDR Team provides world-class Extended Detection and Response (XDR) services, detecting, responding to, and mitigating cyber-attacks on our customers' networks in our Security Operations Centres
• We use a plethora of detection tools such as the Microsoft Security Stack, Splunk, EDR, IDS & IPS tools, and many more, all integrated with NCC Group's Unified Cyber Platform (UCP)
• The MXDR Team is looking for L2 SOC Analysts with a passion for security to join the team, helping customers get the most out of our services and protect their networks
• This is an opportunity to join a technically advanced and talented team and help NCC Group build and deliver world-class services to our customers
• This role is ideal for a seasoned SOC Analyst with experience in cybersecurity looking to broaden their scope of cyber skills with a strong focus on detection and response to cyber incidents
• Monitor global systems for potential threats, vulnerabilities, and indicators of compromise
• Perform in-depth analysis of security alerts utilising both NCC Group's UCP and explore further using the underlying detection platform where necessary
• Provide incident remediation and prevention documentation and recommendations to customers based on defined procedures and analyst experience
• Document and adhere to processes related to security monitoring procedures
• Provide customer service that always exceeds our customers’ expectations
• Initiate escalation procedures to counteract potential threats, vulnerabilities, and threat actors
• Compile and review service-focused reports
• Act as an escalation point for junior team members, aiding and mentoring where necessary
• Contribute to the continuous improvement of SOC procedures and documentation
• Perform other SOC duties as assigned

• We review every application received and will get in touch if your skills and experience match what we’re looking for
• Please note that this role involves mandatory pre-employment background checks due to the nature of the work NCC Group does. To apply, you must be willing and able to undergo the vetting process
• Screening call with your Talent Acquisition Team
• A 30-minute screening call with a member of our Talent Acquisition team to discuss your experience, skills, and suitability for the role. You’ll also have the opportunity to ask any questions you may have about the position, the team, the company, or the overall recruitment process
• First Stage Interview
• In this first-stage interview, you'll meet with the hiring manager to discuss your skills and how they align with the role. You'll also have the opportunity to ask questions about the team and position. To prepare, we recommend researching our company and the work we do, as well as reviewing the role and job description. It may also be helpful to revisit any notes or questions from your initial conversation with the Talent Acquisition partner
• Second Stage Interview
• The final stage interview will focus on two main areas:
• 1. A review of your technical skills based on the assessment you completed
• 2. A deeper conversation around topics discussed in your first-stage interview
• This is an opportunity for us to better understand your experience and how you approach challenges and opportunities relevant to the role
• Offer
• This is where we share the details of the role and formalise the offer with successful candidates