Security Operation Centre Support Analyst 2025

This role sits within the Technical Security Team, which forms a part of the wider Digital Safety Team reporting to the Chief Information Security Officer. The purpose of the Digital Safety Team is to strengthen our defences to protect our customers’ data and prevent cyber-attacks – making us a more efficient digital business. You will work with colleagues from across the business including IT, data protection and others.

You will join the Security Operation Centre as part of the technical security and digital safety teams; this role is 40 hours per week hybrid with no shift work involved. You will support the SOC team in investigation, response, and remediation of cyber security incidents. You will work alongside and be mentored by experienced security professionals in a multi-skilled team. You will use industry leading tools and technologies to support triage, initial investigations, and escalations from our Managed Security Service Providers. You will support the development of new initiatives and projects in a collaborative environment.

What you’ll be doing

• Rapid response, detection, isolation and remediation of security incidents
• Assist in the effective use of operational security systems, including configuration, tuning and coverage
• Assist in establishing, maintaining and using operational security standards, processes, procedures and guidelines
• Provide IT teams with security focused technical support to ensure compliance with security policies, standards and regulations, escalating as appropriate.
• Assist with the process of continuous improvement for operational security services
• Support the monitoring of internal and external security threats and known vulnerabilities, and that technical controls are aligned to these
• Input to management information in relation to security incidents, incident prevention activities and the performance of technical information security controls
• Support the development and operation of processes and procedures that counteract threats and vulnerabilities

Requirements of the role

What you’ll bring to the team

• Ideally you will have some experience in a similar role or environment, for example in IT support, on a helpdesk or security team. An understanding of cyber security principles such as common vulnerabilities, recent high-profile incidents, and key themes in the industry.
• Problem solving. The role will consist of resolving complex incidents in a technical field.
• Creativity. Often the solutions to problems will not be obvious.
• Analytical mindset. Applying technical principles to incident response will require a methodical approach
• Communication and collaboration skills. You will be expected to write reports and deliver briefings on your work as part of a team.
• Experience with ticketing systems e.g. ServiceNow
• Relevant degree e.g. IT, computer science, engineering.
• Relevant certifications e.g. Azure and CompTIA
• 12 Months minimum experience previously working in a cyber security role
• Knowledge of vulnerability management and threat intelligence.
• Familiarity with diverse cybersecurity toolsets and their operational functionalities

What we offer in return

• Competitive base salary
• Up to 20% bonus
• 25 days holiday
• BAYE, SAYE & Performance share schemes
• 5% pension
• Life Assurance
• Flexible benefits package
• Excellent staff travel benefits
• Private healthcare