SOC Analysts (DV Security Clearance)

London, England

Full-time

Onsite

Entry Level

CGI is hiring a SOC Analyst to help protect client systems by detecting, analysing, and responding to cyber security threats. The role monitors security tools, investigates and manages incidents, escalates findings, and provides reporting and remediation guidance to customers.

Apply Now

Responsibilities

The SOC analyst will be the first to respond to cyber security incidents
They will be required to report on cyber threats and will work as part of an expanding security team, working alongside security managers and cybersecurity engineers
The role will require someone with an analytical mindset and a keen eye for detail to investigate alerts, piece together information to build a bigger picture and provide suitable remediation steps for customers
Monitoring our SIEM (Security Incident and Event Management) and SOAR (Security Orchestration, Automation and Response) tools to detect suspicious events and abnormal activities
Triaging events through validating suspicious events and incidents by use of dedicated tools
Ability to escalate with effective reporting to level 3 SOC Analyst or Seniors Stakeholders
Documenting and managing incident cases to utilise information for stakeholder engagement to provide insight and intelligent recommendations
Providing incident management through effective monitoring, reporting and technical guidance for successful resolution
Production of the monthly security reports

Qualification

Required

UK Nationals with single nationality
Be willing to learn how to resolve technical issues
Demonstrate an interest in Cyber Security
Be detail orientated and show the ability to take a structured approach to procedures and working instructions
Have an aptitude for understanding and analysing data for troubleshooting purposes
Strong written communication, critical thinking, and analysis skills
Understanding of key security concepts and attack types such as phishing, malware, vulnerabilities, Cyber Kill Chain, and attack stages
Understanding of networking principles including TCP/IP, WANs, LANs, and commonly used Internet protocols such as SMTP, HTTP, FTP, POP, LDAP
An analytical mindset, capable of digesting a wide range of information and making practical judgements based on available data and context
A desire to keep learning with a curious and creative mindset
Knowledge of Security Tooling (ArcSight, Splunk, MS Sentinel, FortiSIEM, SwimLane, QRadar LogPoint)