SOC & Threat Intelligence Analyst

Solutions 360, a service and technology services company of MDS Group is recruiting for a Security & Threat Intelligence Analyst, for a company within the group. We are looking for a SOC Analyst to join the Cyber Security team, supporting the monitoring, investigation and response to cyber security threats across the organisation. The role will be responsible for reviewing and investigating security alerts, supporting incident response activities and helping ensure security events are appropriately investigated, escalated and resolved. The SOC Analyst will also take responsibility for the day-to-day operation of our Threat Intelligence capability, including management of the Cyberint platform, assessment of relevant external threats and coordination of appropriate actions with other teams. This is a hands‑on role suited to someone with good general cyber security knowledge, strong investigative skills and the ability to work collaboratively across Cyber Security and Technology teams. English language skills are an essential element of this role. Key Role Responsibilities Security Monitoring & Investigation
- Monitor and investigate security alerts and suspicious activity.
- Perform initial triage to determine the nature, severity and potential impact of security events.
- Investigate suspicious activity across user accounts, endpoints, email, cloud services, network infrastructure and applications.
- Correlate information from available security tools and data sources to support investigations.
- Investigate suspected account compromise, malware, phishing and other potential cyber security Incidents.
- Escalate significant or complex incidents through the appropriate incident management process.
- Maintain clear and accurate records of investigations, evidence, decisions and actions.
- Work with other technical teams to support containment and remediation activities. Incident Response
- Support the investigation and response to cyber security incidents.
- Perform initial response activities in accordance with established procedures and playbooks.
- Coordinate actions with other Cyber Security and Technology teams where required.
- Support the collection and preservation of relevant evidence.
- Contribute to post-incident reviews and identification of lessons learned.
- Identify opportunities to improve security monitoring and response processes following incidents. Threat Intelligence
- Manage the day-to-day operation of the organisation's Cyberint Threat Intelligence platform.
- Review and assess alerts and intelligence generated by Cyberint.
- Investigate relevant external threats, credential exposure, impersonation and other identified risks.
- Assess whether identified threats or vulnerabilities are relevant to the organisation.
- Coordinate remediation or escalation with the appropriate internal teams.
- Monitor significant emerging cyber threats and vulnerabilities that could affect the organisation.
- Provide concise updates on significant threats and findings where appropriate.
- Liaise with Cyberint and other third parties where additional investigation or support is required.
- Ensure Threat Intelligence findings are appropriately tracked through to resolution. The SOC Analyst will coordinate and track Threat Intelligence findings but will not necessarily be responsible for implementing remediation. Remediation will remain with the relevant system, application or service owner. SOC Operations
- Support phishing and suspicious email investigations.
- Support investigations involving suspected compromised accounts or endpoints.
- Perform searches across available security telemetry to support investigations.
- Assist with maintaining SOC investigation procedures and response playbooks.
- Identify recurring alerts, false positives or monitoring gaps and recommend improvements.
- Support testing and tuning of security monitoring where required.
- Work with other Cyber Security functions and Technology teams to resolve security issues.
- Contribute to regular SOC reporting and operational metrics. Essential Skills & Experience The successful candidate should have:
- Previous experience working within a SOC, Cyber Security Operations or similar security role.
- Practical experience investigating security alerts and incidents.
- Experience working with SIEM, XDR, EDR or similar security monitoring technologies.
- A good understanding of common cyber threats and attack techniques.
- A good understanding of identity, endpoint, email and network security concepts.
- Experience analysing security information from multiple sources to support an investigation.
- Good analytical and troubleshooting skills.
- Ability to clearly document technical investigations and findings.
- Ability to communicate effectively with both technical and non-technical stakeholders.
- Ability to take ownership of investigations and see them through to an appropriate conclusion.