Cyber Security Analyst (SOC)

About the role

As a tier-one SOC analyst you are the first line of defence. You monitor alerts from the SIEM, triage them against playbooks, escalate genuine incidents and write clear investigation notes. Shifts are structured with a senior analyst always on hand, and every shift ends with a handover review — a natural learning loop. You will train on phishing analysis, endpoint alerts, identity anomalies and basic threat hunting, and you will see more real incidents in six months here than in two years elsewhere. The role is based in Edinburgh on a hybrid pattern of two to three days on site, and the employer recruits actively from across the wider region.

About the employer

The employer is a managed security services provider defending mid-market and enterprise clients across finance, healthcare and retail. They pay for SC-200, Security+ and BTL1 certifications, run internal capture-the-flag events and hire deliberately from career-changers as well as graduates.

What you will be doing

• Monitor and triage security alerts across client environments
• Investigate phishing, malware and identity alerts using playbooks
• Escalate confirmed incidents with clear, evidenced write-ups
• Maintain accurate case records in the ticketing system
• Contribute improvements to detection rules and playbooks
• Take part in shift handovers and post-incident reviews

What they are looking for

• Security fundamentals from a certificate, course or self-study
• Logical, methodical approach to investigation
• Willingness to work a shift pattern
• Right to work in the UK and pass background screening

Nice to have

• Security+, SC-200 or BTL1
• Home lab experience
• Networking fundamentals