Cyber Security SOC Incident Analyst (24/7 Rota)

Cyber Security SOC Incident Analyst (24/7 Rota)

Location: Milton Keynes Area

Shift Pattern:24/7 Rota (including nights & weekends)

Sector: Technology Solutions Provider

NOTE: This role requires the ability to obtain UK Security Check (SC) clearance. To be eligible, you must have lived in the UK for the past 5 years and be willing to undergo government‑led vetting.

Ideally you will be a SC-200: Microsoft Security Operations Analyst. Other SOC Analyst / Security certifications (e.g. CompTIA Security+) will be considered but you must have passed the SC-200 exam by the end probation.

Willingness to participate in shifts for a 24hr service coverage rota including overnight & weekend hours is essential.

Join a high-performing SOC protecting customers across finance, manufacturing and retail. We’re looking for a Cyber Security SOC Incident Analyst to join a small, highly skilled SOC Operations team within a leading international technology solutions provider. You’ll play a critical role in monitoring, detecting and responding to cyber threats 24/7, safeguarding customer environments and supporting continuous service improvement.

Role responsibilities:

Monitor, triage and respond to security incidents using Microsoft Sentinel, Microsoft Defender XDR and ticketing systems.

Follow ITIL v4 processes across Incident, Problem and Service Request management.

Escalate complex issues to the on-call SOC Network & Infrastructure team when required.

Produce weekly and monthly reporting, including analytics, for selected customers.

Manage SOC tooling, configurations and updates.

Contribute to continuous improvement initiatives across the SOC.

Work as part of a 24/7 shift rota, including nights and weekends.

Support customers across multiple sectors, including finance, manufacturing and retail.

Essential skills & experience:

Microsoft Sentinel (operations & administration)

Microsoft Defender XDR

Microsoft 365 administration

Azure cloud services

Windows & Linux OS administration

Networking fundamentals (DNS, SSL, routing, IP, domains)

Programming/scripting (PowerShell, Python, C#, Go)

Strong analytical mindset and evidence-based approach

Excellent written and verbal communication skills

Ability to work independently and handle confidential information professionally

Qualifications:

SC-200: Microsoft Security Operations Analyst (required; can be completed by end of probation)

Additional SOC/security certifications (e.g., Security+) welcomed

ITIL 4 Foundation desirable

Experience:

Minimum 2 years in a similar SOC environment, or

3 years as a Systems Administrator with SOC exposure

Why join us:

Work with cutting-edge Microsoft security technologies

Be part of a collaborative, specialist SOC team

Exposure to diverse customer environments and threat landscapes

Opportunities for professional development and certification

A culture built on ISO 27001, ISO 9001 and ISO 22301 standards

If you’re a motivated SOC professional who thrives in a fast-paced, mission-critical environment, we’d love to hear from you.

Apply now and help us protect customers across multiple industries from evolving cyber threats