Job Title: Commercial SOC Analyst

Reporting to: Head of SOC

Location: Remote

Hours of Work: 12 Hour shift pattern, day and night shifts including working weekends and public holidays

Future requirement to join on-call rota

We are looking for a Cyber Security Analyst to join our Remote Security Operations Centre (SOC). You will ideally have some hands-on experience within a commercial SOC environment and a solid understanding of cyber security principles, threat detection, and incident response. We would also welcome applications from individuals who can demonstrate a genuine passion for cyber security, a proactive mindset, and a strong desire to help protect both our customers and our internal environments from evolving cyber threats.

The Role:

You are going to be responsible for triaging, investigating, classifying, and managing cyber security incidents. We collect log data from any sources our customers require reactive monitoring of, along with deploying agents to provide proactive protection.

You will need to be comfortable with managing multiple simultaneous tasks, at different stages, each with their own priorities across different customers. You’ll have a team to support you along with time to develop yourself.

Once you’ve identified an event which requires our customer to be alerted, you’ll follow defined processes to raise this. You will also need to provide our customers with support to help prevent any damage to them and ensure that it doesn’t happen again.

We have Threat Intelligence feeds which will aide you in keeping up to date with the latest tools, techniques, and procedures. You will also use this intelligence to proactively hunt for threats and create or update existing detection rules.

This role, in addition to protective monitoring, will involve Vulnerability Management and asset discovery, including configuring custom scans and dashboards. You will be required to ensure that our vulnerability scanning service remains a valuable asset to our customers by providing contextualised information and analysis. You will have team support to achieve this.

As a team we’re always looking to raise the bar, learn new things and incorporate new technologies and you will too! You’ll share your knowledge with the team and the wider Cyberfort community, contributing to Group blogs and undertaking research related to technology enhancements.  

Responsibilities:

Perform event triage and incident analysis
Provide advice and guidance in the event of a cyber security breach
Help maintain documentation owned by the CSOC team including but not limited to Standard Operating Procedures (SOPs)
Assist with/own ad-hoc requests (within reason)
Remain current on cyber security trends and intelligence
Identify opportunities to automate processes within the CSOC
Stakeholder and Client Reporting (incident reports and vulnerability management)

Nice to have (any of these):

Programming/scripting skills
Experience in operational security
Experience in Systems administration (Linux/Windows)
Experience in open-source threat intelligence
General IT practices
General security practices and knowledge
IT Service Management basics (ITIL)
Knowledge of:
- Cyber threats and vulnerabilities
- Adversarial tactics, techniques, and procedures
- Incident response and handling methodologies
- Risk management processes
- IT architecture and operations (computing, network, storage & cloud)
- Computer networking concepts and protocols, and network security methodologies
- Responding to audit and regulatory requirements
- Familiarization of the MITRE ATT&CK Framework.
Ability to work nights, weekends, and/or holidays in the event of an incident response emergency

Why Join Cyberfort

At Cyberfort, we're committed to creating an environment where our people can do their best work, develop their careers and feel part of something meaningful. Alongside a supportive culture and opportunities to grow, we've offer a package that supports your health, wellbeing, finances, development and work-life balance, helping you feel your best both inside and outside of work. Our benefits include:

25 days annual leave, plus bank holidays, and your birthday day off
The option to buy and sell annual leave
Hybrid and flexible working opportunities (where applicable)
Enhanced family-friendly policies
Company pension scheme
Life assurance
Private Medical Insurance and wellbeing support
Professional training, certifications and learning opportunities
Employee referral bonus scheme
Recognition and reward programmes
Electric Car & Cycle to Work scheme
Discounts and savings through our employee benefits platform

A place where you can be yourself

At Cyberfort, we believe that diverse perspectives make us stronger. We're committed to creating an environment where everyone feels respected, supported and able to be themselves at work.

We know that talent comes in many forms, and we're dedicated to ensuring our recruitment process is accessible and inclusive for all. If there's anything we can do to support you during your application or interview experience, we'd encourage you to let us know.

We're proud to champion inclusion through our partnerships and commitments, including:

Signatories of the Armed Forces Covenant
Corporate Members of Neurodiversity in Business
A Disability Confident Employer
Supporters of the CyberFirst initiative

We're continually learning, listening and evolving to build a workplace where everyone has the opportunity to thrive, grow and make a meaningful impact.

About Cyberfort

Cyberfort helps organisations stay ahead of cyber threats. We work alongside businesses and public sector organisations to strengthen their security, identify vulnerabilities and respond to threats before they become incidents.

Our expertise spans cyber security consultancy, penetration testing and managed detection and response (MDR). From helping customers understand their cyber risks and improve their security posture, to testing critical systems and providing 24/7 threat monitoring, we deliver practical solutions that help organisations operate with confidence.

What makes Cyberfort different is our people. We combine deep technical expertise with a collaborative, customer-first approach, building trusted partnerships and helping our customers navigate an ever-changing threat landscape.

Our Values

At Cyberfort, how we work is just as important as what we do. Our culture is built around five core values: being curious, working as a team, staying agile, taking ownership, and thinking innovatively.

We’re looking for individuals who are naturally inquisitive, collaborative, and adaptable people who take pride in their work, are open to learning, and are always looking for ways to improve both themselves and the way we deliver for our customers.

APPLY NOW:

We review applications on a rolling basis and aim to move quickly through our selection process, so we encourage you to apply as soon as possible. If you would like to apply for this role, we'd like to see your CV and a cover letter.

Commercial SOC Analyst