SOC Analyst

Duration: Inital 6 month contract with possible extension Location: Hybrid - Andover (onsite 2 days per fortnight)

Rate: Day rate inside IR35, PAYE via a payroll company

• SOC Support, Development and Maturation (SFIA Level 5) deliverables include but are not limited to:
• Act as a focal point for Security Incident escalation. A focal point for advice, guidance, support and, if necessary, action on Security Incidents raised and typical associated SOC Level 2 duties.
• Support 1st line analyst triage and escalation.
• Build/Develop Use Cases – Develop use case and facilitation, threat modelling and translation of operational requirements into SOC SIEM tool. Focus on insider threat and Data Loss Prevention use case to demonstrate the process used by SOC analysts.
• Cyber Security Incident Management Plan (SIMP). Develop the Cyber Incident Response Plan in line with NIST and SANS guidance and incorporating the wider teams. Create supporting documentation and guidance for SOC and wider org to follow OOH with clear lines to resolver group support.
• SOC Roadmap development – assist in Developing SOC in line with recommendations, from the Security Architect, industry Best Practices and ongoing SOC Security Operations Maturity Assessment (SOMA).
• IaaS, PaaS and SaaS On-boarding – Work with wider development teams and develop, process for log on-boarding and develop costing model for SOC.
• Official ‘O’ and Software Design Life Cycle ‘SDLC’ scope out – Review of network diagrams of both environments and prioritise log on-boarding into the SOC SIEM tool.
• Breakdown of workable project sizes and raise CRQ’s with dependent teams for onboarding.
• Develop SOC BCDR – Review existing documentation for the SOC BCDR and develop process/plan that feeds into the wider process.
• Cyber Incident Investigation/Escalation – Reviewing vulnerability event channels and identifying issues for escalation to different teams.
• Training and development – Mentor existing SOC team and develop play books and training and development content to enable quick upskilling of new starters to the SOC.
• Any additional other support or development tasks required by SOC Manager or Senior Leadership Team (SLT) within the scope of the SOC.