SOC Analyst

Nomios

. Monitor and triage alerts across SIEM, EDR/XDR, email and web security platforms .

Posted 11/6/2026full-timeBasingstoke • United KingdomJuniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in monitoring and triaging security alerts across SIEM, EDR, and XDR platforms, with strong investigative skills to identify indicators of compromise and escalate complex cases. Proficient in communication and collaboration with stakeholders, while maintaining flexibility during major incidents.

Highest-signal resume keywords

SIEM ExperienceEDR/XDR InvestigationUnderstanding of MITRE ATT&CKMicrosoft 365 ProficiencySC Clearance Eligibility

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Operations Centre ExperienceAlert Triage and InvestigationWindows Event Log AnalysisNetwork Telemetry InterpretationMalware Execution Chain KnowledgeThreat HuntingScripting or Programming ExperienceVulnerability ManagementDetection Logic DevelopmentIncident Response

Soft Skills

Clear Written CommunicationVerbal CommunicationCollaborationFlexibility

Tools & Technologies

SalesforceMicrosoft ExcelMicrosoft WordMicrosoft PowerPointDNSHTTPSMBLDAPWindowsMacOS

Certifications & Qualifications

Technical CertificationsRelevant Degree in Cyber SecurityRelevant Degree in Digital ForensicsRelevant Degree in Incident ResponseRelevant Degree in NetworkingRelevant Degree in Information TechnologyRelevant Degree in ComputingRelevant Degree in Programming

Industry Keywords

Cyber SecurityIncident ResponseThreat DetectionMalware AnalysisSecurity AlertsTTPsIndicators of CompromiseInvestigation WorkflowsRunbooksCustomer Environments

Tech Stack

Tools & technologies

Cyber SecurityDNSLinuxMacOS

About the role

Key responsibilities & impact

Monitor and triage alerts across SIEM, EDR/XDR, email and web security platforms
Investigate suspicious activity and determine whether escalation is required
Follow SOC runbooks and investigation workflows
Build clear activity timelines and maintain accurate investigation notes
Escalate complex cases to Senior and Lead Analysts with appropriate context
Review vulnerability management output and provide basic prioritisation insight
Participate in directed threat hunting activities
Suggest improvements to detections, dashboards and runbooks
Support testing of new use cases and detection logic
Provide clear written updates for customers and internal stakeholders
Participate in shift handovers
Collaborate with Senior and Lead Analysts on complex investigations and professional development
Work 12-hour shifts consisting of 2 days, 2 nights, followed by 4 days/nights off
Maintain flexibility during major incidents

Requirements

What you’ll need

Previous hands-on experience working in a Security Operations Centre; not suitable for candidates seeking their first SOC Analyst position
For MSP/MSSP candidates, a minimum of one year's hands-on experience using comparable SOC technologies and supporting multiple customer environments
Experience triaging, investigating and escalating security alerts across SIEM, EDR or XDR platforms
Strong understanding of attacker behaviours, TTPs and common malware execution chains
Ability to identify indicators of compromise, build investigation timelines and distinguish legitimate administrative activity from suspicious behaviour
Ability to read and interpret Windows event logs, authentication logs, process trees, network telemetry and other relevant log sources
Understanding of DNS, HTTP, SMB and LDAP, plus operational knowledge of Windows, macOS and Linux
Working knowledge of MITRE ATT&CK and experience applying it during investigations or detection development
Clear written and verbal communication skills
Strong Microsoft 365 skills, particularly Excel, Word and PowerPoint
Experience with Salesforce or a comparable case-management platform
Eligibility for SC clearance, including having lived in the UK for five consecutive years
Relevant hands-on technical certifications are desirable
Relevant degree in cyber security, digital forensics, incident response, networking, information technology, computing or programming is desirable
Practical AI, scripting or programming experience is desirable

Benefits

Comp & perks

Competitive salary and commission scheme
Industry-leading benefits
Career development pathways into Threat Intelligence, SOC Engineering, SOC Professional Services, senior SOC roles and Incident Response
Regular team events
Knowledge-sharing sessions
Collaborative, supportive and agile team environment
Home-based working with occasional office visits
4 days/nights off after 2 days and 2 nights of 12-hour shifts