Security Operations

• Monitoring & Incident Response
• Triage and investigate alerts raised by the SOC and other monitoring platforms.
• Perform detailed incident response activities, including containment, eradication, and recovery.
• Conduct root cause analysis on security incidents and coordinate post-incident reviews.
• Provide technical input to refine detection and escalation processes.
• Threat Detection & Prevention
• Maintain and tune security tools to reduce false positives and improve visibility across the environment.
• Assist in developing and implementing new detection rules, dashboards, and automation scripts.
• Review firewall, WAF, and endpoint configurations to ensure compliance with best practices.
• Support vulnerability scanning, patch management, and remediation activities.
• Collaboration & Continuous Improvement
• Work alongside the Infrastructure, Platform, and DevOps teams to embed security into operations and deployments.
• Assist in implementing improvements to endpoint protection, SIEM configurations, and network defences.
• Support initiatives aligned with ISO 27001 and Cyber Essentials Plus compliance.
• Provide regular security reporting and updates to the IT Leadership team.
• Documentation & Governance
• Maintain accurate incident logs, configuration documentation, and response playbooks.
• Assist in security audits, penetration test follow-ups, and evidence gathering for compliance reviews.
• Contribute to policy updates and awareness initiatives across the organisation.

Security Operations Analyst

SOC Analyst

Embedded VSOC Analyst

Cyber Security Incident Response Lead

Lead CyberSecurity SOC Analyst