17 jobs found

SOC Analyst 50,000- 54,000 Hybrid - up to 2 days per week in either Glasgow/Edinburgh office We are looking for a brilliant SOC Analyst to join a market leading organisation within the energy sector embarking on a transformation of their IT Security Team. This well-established company owns and manages critical national infrastructure and is engaging in a forward funded futureproofing program with enormous potential for growth. Information Security is an integral part of their business operation, so this role is critical to the business. Within this role, you will be responsible for ensuring the IT and OT networks are secure, managed and maintained in line with policies and legal and regulatory requirements. You will act as the Security subject matter expert in your respective area and act as the primary contact when assisting with Security Incident remediation. You will possess strong technical and security knowledge, and will provide technical/non technical security support to the wider Security team and organisation. We are looking for an individual that has: Expertise in Cloud (IaaS, PaaS, SaaS) in particular AWS, MS Sentinel and Defender Good understanding of Security Operations and related security tools such as Firewalls, VPN Gateway, SIEM, SOAR, EDR, MDR, UEBA, DLP Good understanding and practical experience of Cyber Security Frameworks and standards such as NCSC security principles, NIST Framework, ISO 27001, ISO27005, IEC62443 etc. Experience and knowledge of Industrial Control Systems is advantageous, but you will be provided with the opportunity to learn new technical skills. Right to work in the UK - you must have lived in the UK for at least 5 years - you will be required to be Security Cleared.

SOC Manager/Analyst (DV Cleared) Location: Hanslope Park, Milton Keynes (On-site) Contract Length: 3 Years Rate: 550- 600 per day (Outside IR35) Security Clearance: Current MOD DV Clearance required Nationality Requirement: Sole UK Nationals only Overview We are recruiting for an experienced SOC Manager/Analyst to support a high-profile, mission-critical operational environment on a long-term contract basis. This role combines operational leadership with technical awareness , placing you at the centre of a live Security Operations Centre where you'll maintain situational awareness across multiple domains, coordinate incident response, and ensure effective operational decision-making. You'll act as the operational lead within a fast-paced control room environment, working closely with cyber, network, infrastructure and security teams to maintain service resilience and operational control. Key Responsibilities Maintain a single operational picture across cyber, network, service and physical security domains. Monitor live environments and assess alerts and incidents in real time. Perform initial triage and validation of alerts, reducing noise and ensuring accurate incident classification. Manage incident prioritisation and escalation in accordance with operational procedures. Coordinate response activities across SOC, NOC, Infrastructure and Security teams. Support and lead Major Incident Management activities where required. Maintain accurate operational records, dashboards and shift logs. Deliver comprehensive operational handovers to ensure continuous situational awareness. Role Profile This is an operational leadership position with a balanced technical focus: 60% Operational Leadership & Incident Coordination 40% Technical Awareness & Alert Triage The successful contractor will be comfortable leading operational response, interpreting technical information, asking the right questions, and driving resolution in a live, high-pressure environment. Essential Skills & Experience Experience working within a SOC, NOC, Major Incident Management or 24/7 Operations Centre . Strong understanding of SOC and NOC processes, including alert triage and escalation. Ability to interpret monitoring alerts, dashboards and operational logs. Knowledge of incident severity, impact assessment and prioritisation. Proven experience coordinating technical teams during critical incidents. Excellent communication, stakeholder management and decision-making skills. Ability to remain calm, organised and decisive in operationally critical environments. Ideal Background We're particularly interested in contractors from backgrounds such as: SOC Manager or Senior SOC Analyst with leadership responsibilities. Major Incident Manager with technical exposure. Senior NOC Analyst or Operations Lead within a 24/7 operational environment. Service Operations Manager supporting secure or mission-critical services. Contract Details 3-year contract offering long-term programme stability. 550- 600 per day (Outside IR35). Full-time, on-site role based in Hounslow Park . Opportunity to work within a highly secure, mission-critical environment on a nationally significant programme. Mandatory Requirements Due to the sensitive nature of this programme, applicants must : Hold current MOD Developed Vetting (DV) Clearance . Be a sole UK national . Be available to work full-time on-site in Hounslow Park .

SOC Analyst (DV Cleared) Location: Hanslope Park, Milton Keynes Salary: 65,000 + 10,000 Bonus Employment Type: Permanent Security Clearance: Must hold current MOD DV Clearance Nationality Requirement: Sole UK Nationals only Overview We are seeking an experienced SOC Analyst to join a high-profile operational environment, supporting critical services within a secure, live operations centre. This is a unique hybrid position that combines operational leadership with technical awareness . You'll take ownership of the live operational picture, coordinating incident response across cyber, network, infrastructure and physical security teams while ensuring informed, timely decision-making. This role is ideal for someone who thrives in a fast-paced control room environment and can confidently lead operational response without needing to be a deep technical specialist. Key Responsibilities Maintain a single operational view across cyber, network, service and physical security domains. Monitor live operational environments and assess alerts and incidents in real time. Perform initial triage and validation of alerts, reducing noise and ensuring accurate incident classification. Control incident prioritisation and escalation in line with operational procedures. Coordinate activities across SOC, NOC, Infrastructure and Security teams. Support and lead Major Incident Management activities where required. Maintain accurate operational logs, dashboards and reporting. Deliver effective shift handovers and maintain continuous situational awareness. About the Role This position is intentionally balanced between operational leadership and technical understanding: 60% Operational Leadership & Coordination 40% Technical Awareness & Incident Triage You'll be expected to understand operational and technical information, ask the right questions, coordinate the right teams and maintain control during high-pressure situations. Essential Skills & Experience Experience within a SOC, NOC, Major Incident Management or 24/7 Operations Centre . Good understanding of SOC and NOC workflows, including alert triage and escalation processes. Ability to interpret monitoring alerts, operational dashboards and logs at a high level. Strong understanding of incident severity, business impact and prioritisation. Proven experience coordinating multiple technical teams during live incidents. Excellent communication, decision-making and stakeholder management skills. Ability to remain calm and organised in time-critical operational environments. Ideal Background We would particularly welcome applications from candidates with experience as: Major Incident Manager with technical exposure. Senior SOC Analyst or NOC Analyst with leadership responsibilities. Service Operations Lead within a 24/7 operations or command centre. Operational Duty Manager supporting secure or critical environments. What's on Offer 65,000 basic salary. 10,000 annual bonus. Permanent position. Opportunity to work within a highly secure, mission-critical environment. Challenging and rewarding operational leadership role with significant responsibility. Eligibility Requirements Due to the nature of this position, applicants must : Hold current MOD Developed Vetting (DV) Clearance . Be a sole UK national . Be able to work full-time on-site in Hanslope Park .

SOC Analyst (DV Cleared) Location: Hanslope Park, Milton Keynes Salary: £65,000 + £10,000 Bonus Employment Type: Permanent Security Clearance: Must hold current MOD DV Clearance Nationality Requirement: Sole UK Nationals only Overview We are seeking an experienced SOC Analyst to join a high-profile operational environment, supporting critical services within a secure, live operations centre. This is a unique hybrid position that combines operational leadership with technical awareness . You'll take ownership of the live operational picture, coordinating incident response across cyber, network, infrastructure and physical security teams while ensuring informed, timely decision-making. This role is ideal for someone who thrives in a fast-paced control room environment and can confidently lead operational response without needing to be a deep technical specialist. Key Responsibilities Maintain a single operational view across cyber, network, service and physical security domains. Monitor live operational environments and assess alerts and incidents in Real Time. Perform initial triage and validation of alerts, reducing noise and ensuring accurate incident classification. Control incident prioritisation and escalation in line with operational procedures. Coordinate activities across SOC, NOC, Infrastructure and Security teams. Support and lead Major Incident Management activities where required. Maintain accurate operational logs, dashboards and reporting. Deliver effective shift handovers and maintain continuous situational awareness. About the Role This position is intentionally balanced between operational leadership and technical understanding: 60% Operational Leadership & Coordination 40% Technical Awareness & Incident Triage You'll be expected to understand operational and technical information, ask the right questions, coordinate the right teams and maintain control during high-pressure situations. Essential Skills & Experience Experience within a SOC, NOC, Major Incident Management or 24/7 Operations Centre . Good understanding of SOC and NOC workflows, including alert triage and escalation processes. Ability to interpret monitoring alerts, operational dashboards and logs at a high level. Strong understanding of incident severity, business impact and prioritisation. Proven experience coordinating multiple technical teams during live incidents. Excellent communication, decision-making and stakeholder management skills. Ability to remain calm and organised in time-critical operational environments. Ideal Background We would particularly welcome applications from candidates with experience as: Major Incident Manager with technical exposure. Senior SOC Analyst or NOC Analyst with leadership responsibilities. Service Operations Lead within a 24/7 operations or command centre. Operational Duty Manager supporting secure or critical environments. What's on Offer £65,000 basic salary. £10,000 annual bonus. Permanent position. Opportunity to work within a highly secure, mission-critical environment. Challenging and rewarding operational leadership role with significant responsibility. Eligibility Requirements Due to the nature of this position, applicants must : Hold current MOD Developed Vetting (DV) Clearance . Be a sole UK national . Be able to work full-time on-site in Hanslope Park .

SOC Manager/Analyst (DV Cleared) Location: Hanslope Park, Milton Keynes (On-site) Contract Length: 3 Years Rate: £550-£600 per day (Outside IR35) Security Clearance: Current MOD DV Clearance required Nationality Requirement: Sole UK Nationals only Overview We are recruiting for an experienced SOC Manager/Analyst to support a high-profile, mission-critical operational environment on a long-term contract basis. This role combines operational leadership with technical awareness , placing you at the centre of a live Security Operations Centre where you'll maintain situational awareness across multiple domains, coordinate incident response, and ensure effective operational decision-making. You'll act as the operational lead within a fast-paced control room environment, working closely with cyber, network, infrastructure and security teams to maintain service resilience and operational control. Key Responsibilities Maintain a single operational picture across cyber, network, service and physical security domains. Monitor live environments and assess alerts and incidents in Real Time. Perform initial triage and validation of alerts, reducing noise and ensuring accurate incident classification. Manage incident prioritisation and escalation in accordance with operational procedures. Coordinate response activities across SOC, NOC, Infrastructure and Security teams. Support and lead Major Incident Management activities where required. Maintain accurate operational records, dashboards and shift logs. Deliver comprehensive operational handovers to ensure continuous situational awareness. Role Profile This is an operational leadership position with a balanced technical focus: 60% Operational Leadership & Incident Coordination 40% Technical Awareness & Alert Triage The successful contractor will be comfortable leading operational response, interpreting technical information, asking the right questions, and driving resolution in a live, high-pressure environment. Essential Skills & Experience Experience working within a SOC, NOC, Major Incident Management or 24/7 Operations Centre . Strong understanding of SOC and NOC processes, including alert triage and escalation. Ability to interpret monitoring alerts, dashboards and operational logs. Knowledge of incident severity, impact assessment and prioritisation. Proven experience coordinating technical teams during critical incidents. Excellent communication, stakeholder management and decision-making skills. Ability to remain calm, organised and decisive in operationally critical environments. Ideal Background We're particularly interested in contractors from backgrounds such as: SOC Manager or Senior SOC Analyst with leadership responsibilities. Major Incident Manager with technical exposure. Senior NOC Analyst or Operations Lead within a 24/7 operational environment. Service Operations Manager supporting secure or mission-critical services. Contract Details 3-year contract offering long-term programme stability. £550-£600 per day (Outside IR35). Full-time, on-site role based in Hounslow Park . Opportunity to work within a highly secure, mission-critical environment on a nationally significant programme. Mandatory Requirements Due to the sensitive nature of this programme, applicants must : Hold current MOD Developed Vetting (DV) Clearance . Be a sole UK national . Be available to work full-time on-site in Hounslow Park .

SOC Manager/Analyst (DV Cleared) Location: Hounslow Park (On-site) Contract Length: 3 Years Rate: 550- 600 per day (Outside IR35) Security Clearance: Current MOD DV Clearance required Nationality Requirement: Sole UK Nationals only Overview We are recruiting for an experienced SOC Manager/Analyst to support a high-profile, mission-critical operational environment on a long-term contract basis. This role combines operational leadership with technical awareness , placing you at the centre of a live Security Operations Centre where you'll maintain situational awareness across multiple domains, coordinate incident response, and ensure effective operational decision-making. You'll act as the operational lead within a fast-paced control room environment, working closely with cyber, network, infrastructure and security teams to maintain service resilience and operational control. Key Responsibilities Maintain a single operational picture across cyber, network, service and physical security domains. Monitor live environments and assess alerts and incidents in real time. Perform initial triage and validation of alerts, reducing noise and ensuring accurate incident classification. Manage incident prioritisation and escalation in accordance with operational procedures. Coordinate response activities across SOC, NOC, Infrastructure and Security teams. Support and lead Major Incident Management activities where required. Maintain accurate operational records, dashboards and shift logs. Deliver comprehensive operational handovers to ensure continuous situational awareness. Role Profile This is an operational leadership position with a balanced technical focus: 60% Operational Leadership & Incident Coordination 40% Technical Awareness & Alert Triage The successful contractor will be comfortable leading operational response, interpreting technical information, asking the right questions, and driving resolution in a live, high-pressure environment. Essential Skills & Experience Experience working within a SOC, NOC, Major Incident Management or 24/7 Operations Centre . Strong understanding of SOC and NOC processes, including alert triage and escalation. Ability to interpret monitoring alerts, dashboards and operational logs. Knowledge of incident severity, impact assessment and prioritisation. Proven experience coordinating technical teams during critical incidents. Excellent communication, stakeholder management and decision-making skills. Ability to remain calm, organised and decisive in operationally critical environments. Ideal Background We're particularly interested in contractors from backgrounds such as: SOC Manager or Senior SOC Analyst with leadership responsibilities. Major Incident Manager with technical exposure. Senior NOC Analyst or Operations Lead within a 24/7 operational environment. Service Operations Manager supporting secure or mission-critical services. Contract Details 3-year contract offering long-term programme stability. 550- 600 per day (Outside IR35). Full-time, on-site role based in Hounslow Park . Opportunity to work within a highly secure, mission-critical environment on a nationally significant programme. Mandatory Requirements Due to the sensitive nature of this programme, applicants must : Hold current MOD Developed Vetting (DV) Clearance . Be a sole UK national . Be available to work full-time on-site in Hounslow Park .

SOC Manager/Analyst (DV Cleared) Location: Hounslow Park (On-site) Contract Length: 3 Years Rate: £550-£600 per day (Outside IR35) Security Clearance: Current MOD DV Clearance required Nationality Requirement: Sole UK Nationals only Overview We are recruiting for an experienced SOC Manager/Analyst to support a high-profile, mission-critical operational environment on a long-term contract basis. This role combines operational leadership with technical awareness , placing you at the centre of a live Security Operations Centre where you'll maintain situational awareness across multiple domains, coordinate incident response, and ensure effective operational decision-making. You'll act as the operational lead within a fast-paced control room environment, working closely with cyber, network, infrastructure and security teams to maintain service resilience and operational control. Key Responsibilities Maintain a single operational picture across cyber, network, service and physical security domains. Monitor live environments and assess alerts and incidents in Real Time. Perform initial triage and validation of alerts, reducing noise and ensuring accurate incident classification. Manage incident prioritisation and escalation in accordance with operational procedures. Coordinate response activities across SOC, NOC, Infrastructure and Security teams. Support and lead Major Incident Management activities where required. Maintain accurate operational records, dashboards and shift logs. Deliver comprehensive operational handovers to ensure continuous situational awareness. Role Profile This is an operational leadership position with a balanced technical focus: 60% Operational Leadership & Incident Coordination 40% Technical Awareness & Alert Triage The successful contractor will be comfortable leading operational response, interpreting technical information, asking the right questions, and driving resolution in a live, high-pressure environment. Essential Skills & Experience Experience working within a SOC, NOC, Major Incident Management or 24/7 Operations Centre . Strong understanding of SOC and NOC processes, including alert triage and escalation. Ability to interpret monitoring alerts, dashboards and operational logs. Knowledge of incident severity, impact assessment and prioritisation. Proven experience coordinating technical teams during critical incidents. Excellent communication, stakeholder management and decision-making skills. Ability to remain calm, organised and decisive in operationally critical environments. Ideal Background We're particularly interested in contractors from backgrounds such as: SOC Manager or Senior SOC Analyst with leadership responsibilities. Major Incident Manager with technical exposure. Senior NOC Analyst or Operations Lead within a 24/7 operational environment. Service Operations Manager supporting secure or mission-critical services. Contract Details 3-year contract offering long-term programme stability. £550-£600 per day (Outside IR35). Full-time, on-site role based in Hounslow Park . Opportunity to work within a highly secure, mission-critical environment on a nationally significant programme. Mandatory Requirements Due to the sensitive nature of this programme, applicants must : Hold current MOD Developed Vetting (DV) Clearance . Be a sole UK national . Be available to work full-time on-site in Hounslow Park .

Cyber security analyst.* Must Have Active DV Clearance.* Location: Full time on site in Bracknell Duration: 6 months + Your role will involve oversight of shift's Security Operators providing security monitoring services, performing initial investigation of potential threats by use of Security Incident and Event Management (SIEM) tooling, and monitoring the SIEM tooling for faults. Working as part of an on-site 24x7 shift team, you will contribute to maintaining the confidentiality, integrity, and availability of our customer's services by performing routine security incident management to identify, prioritise, and escalate potential threats. Your transferable skills and experience: *Experience in cyber security. *Technical leadership. *Good communication. *Technical skills in an enterprise IT area (eg networking, Servers). Due to the nature and urgency of this post, candidates holding or who have held high level security clearance in the past are most welcome to apply. Please note successful applicants will be required to be security cleared prior to appointment which can take a minimum 18 weeks. LA International is an award-winning partner of choice for many of the world's most influential companies and government organisations. Holding Enhanced Government Security Accreditation, we are recognised as the European market leader in the delivery of Security Cleared talent to organisations that demand the very highest levels of security, compliance and assurance. An award-winning organisation, having secured the prestigious Queens Award for Enterprise: International Trade over multiple years. We are committed to fostering an inclusive, equitable and accessible workplace where everyone feels valued and supported. We welcome applications from all individuals, regardless of background or identity, and we encourage candidates who may not meet every listed requirement to still apply. If you require any adjustments or support during the recruitment process, please let us know and we will work with you to ensure a fair and accessible experience. Please Note: If a high volume of applications is received, only candidates shortlisted will be contacted.

Duty Manager / SOC Analyst (DV Cleared) Location: Hounslow Park (On-site) Salary: 65,000 + 10,000 Bonus Employment Type: Permanent Security Clearance: Must hold current MOD DV Clearance Nationality Requirement: Sole UK Nationals only Overview We are seeking an experienced Duty Manager / SOC Analyst to join a high-profile operational environment, supporting critical services within a secure, live operations centre. This is a unique hybrid position that combines operational leadership with technical awareness . You'll take ownership of the live operational picture, coordinating incident response across cyber, network, infrastructure and physical security teams while ensuring informed, timely decision-making. This role is ideal for someone who thrives in a fast-paced control room environment and can confidently lead operational response without needing to be a deep technical specialist. Key Responsibilities Maintain a single operational view across cyber, network, service and physical security domains. Monitor live operational environments and assess alerts and incidents in real time. Perform initial triage and validation of alerts, reducing noise and ensuring accurate incident classification. Control incident prioritisation and escalation in line with operational procedures. Coordinate activities across SOC, NOC, Infrastructure and Security teams. Support and lead Major Incident Management activities where required. Maintain accurate operational logs, dashboards and reporting. Deliver effective shift handovers and maintain continuous situational awareness. About the Role This position is intentionally balanced between operational leadership and technical understanding: 60% Operational Leadership & Coordination 40% Technical Awareness & Incident Triage You'll be expected to understand operational and technical information, ask the right questions, coordinate the right teams and maintain control during high-pressure situations. Essential Skills & Experience Experience within a SOC, NOC, Major Incident Management or 24/7 Operations Centre . Good understanding of SOC and NOC workflows, including alert triage and escalation processes. Ability to interpret monitoring alerts, operational dashboards and logs at a high level. Strong understanding of incident severity, business impact and prioritisation. Proven experience coordinating multiple technical teams during live incidents. Excellent communication, decision-making and stakeholder management skills. Ability to remain calm and organised in time-critical operational environments. Ideal Background We would particularly welcome applications from candidates with experience as: Major Incident Manager with technical exposure. Senior SOC Analyst or NOC Analyst with leadership responsibilities. Service Operations Lead within a 24/7 operations or command centre. Operational Duty Manager supporting secure or critical environments. What's on Offer 65,000 basic salary. 10,000 annual bonus. Permanent position. Opportunity to work within a highly secure, mission-critical environment. Challenging and rewarding operational leadership role with significant responsibility. Eligibility Requirements Due to the nature of this position, applicants must : Hold current MOD Developed Vetting (DV) Clearance . Be a sole UK national . Be able to work full-time on-site in Hounslow Park .

Duty Manager/SOC Analyst (DV Cleared) Location: Hounslow Park (On-site) Salary: £65,000 + £10,000 Bonus Employment Type: Permanent Security Clearance: Must hold current MOD DV Clearance Nationality Requirement: Sole UK Nationals only Overview We are seeking an experienced Duty Manager/SOC Analyst to join a high-profile operational environment, supporting critical services within a secure, live operations centre. This is a unique hybrid position that combines operational leadership with technical awareness . You'll take ownership of the live operational picture, coordinating incident response across cyber, network, infrastructure and physical security teams while ensuring informed, timely decision-making. This role is ideal for someone who thrives in a fast-paced control room environment and can confidently lead operational response without needing to be a deep technical specialist. Key Responsibilities Maintain a single operational view across cyber, network, service and physical security domains. Monitor live operational environments and assess alerts and incidents in Real Time. Perform initial triage and validation of alerts, reducing noise and ensuring accurate incident classification. Control incident prioritisation and escalation in line with operational procedures. Coordinate activities across SOC, NOC, Infrastructure and Security teams. Support and lead Major Incident Management activities where required. Maintain accurate operational logs, dashboards and reporting. Deliver effective shift handovers and maintain continuous situational awareness. About the Role This position is intentionally balanced between operational leadership and technical understanding: 60% Operational Leadership & Coordination 40% Technical Awareness & Incident Triage You'll be expected to understand operational and technical information, ask the right questions, coordinate the right teams and maintain control during high-pressure situations. Essential Skills & Experience Experience within a SOC, NOC, Major Incident Management or 24/7 Operations Centre . Good understanding of SOC and NOC workflows, including alert triage and escalation processes. Ability to interpret monitoring alerts, operational dashboards and logs at a high level. Strong understanding of incident severity, business impact and prioritisation. Proven experience coordinating multiple technical teams during live incidents. Excellent communication, decision-making and stakeholder management skills. Ability to remain calm and organised in time-critical operational environments. Ideal Background We would particularly welcome applications from candidates with experience as: Major Incident Manager with technical exposure. Senior SOC Analyst or NOC Analyst with leadership responsibilities. Service Operations Lead within a 24/7 operations or command centre. Operational Duty Manager supporting secure or critical environments. What's on Offer £65,000 basic salary. £10,000 annual bonus. Permanent position. Opportunity to work within a highly secure, mission-critical environment. Challenging and rewarding operational leadership role with significant responsibility. Eligibility Requirements Due to the nature of this position, applicants must : Hold current MOD Developed Vetting (DV) Clearance . Be a sole UK national . Be able to work full-time on-site in Hounslow Park .

We are currently recruiting for Senior Cyber Security Analysts and Associate Security Analysts - both working a 3-month contract for our client 3 days per week on-site in London. As a senior security analyst with responsibility for incident response, you will: lead the investigation of security alerts to understand the nature and extent of possible cyber incidents lead the forensic analysis of systems, files, network traffic and cloud environments lead the technical response to cyber incidents by identifying and implementing (or coordinating the implementation of) containment, eradication and recovery actions support the wider coordination of cyber incidents review previous incidents to identify lessons and actions identify and deliver opportunities for continual improvement of the incident response capability work closely alongside other Cyber Defence functions, supporting the continual improvement of wider capabilities develop and update internal plans, playbooks and knowledge base articles act as an escalation point for, and provide coaching and mentoring to, security analysts be responsible for leadership and line management of security analysts Cyber incidents can and do arise on a 24/7 basis. The team operates an out-of-hours on call rota, which you will be expected to join. We're interested in people who have: significant experience investigating and responding to cyber incidents significant experience using security tools (eg, EDR, SIEM) to support the investigation and response to cyber incidents experience managing and coordinating the response to cyber incidents experience coaching and mentoring junior staff an in-depth understanding of the tools, techniques and procedures used by threat actors excellent analytical and problem solving skills excellent verbal and written communication skills It's desirable, but not essential, that you have: experience with Splunk experience working in an Agile environment experience with cloud environments such as AWS As an associate security analyst you will: triage and investigate cyber security alerts and reports from users use a variety of techniques to analyse systems, files, network traffic and cloud environments and understand the nature and extent of possible cyber incidents support the technical response to cyber incidents by identifying and implementing (or supporting the implementation of) containment, eradication and recovery actions support the coordination of cyber incidents contribute to post-incident reviews to identify lessons and actions identify opportunities for, and support the delivery of, continual improvements to the incident investigation and response capability work closely alongside other Cyber Defence functions, supporting the continual improvement of wider capabilities contribute to internal plans, playbooks and knowledge base articles act as an escalation point for, and provide coaching and mentoring to, apprentice security analysts be responsible for line management of apprentice security analysts Cyber incidents can and do arise on a 24/7 basis. The team operates an out-of-hours on call rota, which you will be expected to join We're interested in people who have: experience investigating and responding to cyber incidents experience using security tools (eg, EDR, SIEM) to support the investigation and response to cyber incidents Experience with SIEM tools (experience of Splunk preferred but experience of Microsoft Sentinel or an equivalent SIEM tool is acceptable) an understanding of the tools, techniques and procedures commonly used by threat actors good analytical and problem-solving skills good verbal and written communication skills It's desirable, but not essential, that you have: experience with Splunk experience working in an Agile environment experience with cloud environments such as AWS If you feel you have the skills and experience needed for this role; please do apply now.

Security Analyst/Detection Engineer Location: Corsham, 60% on site Duration: 20/02/2026 MUST BE PAYE THROUGH UMBRELLA We are heading up a recruitment drive for a global consultancy that require an SC or DV cleared Security Analyst/Detection Engineer to join them on a major defence project that's based in Corsham. Role description: Good Security analyst skills, knowledge of working in a MOD SOC environment beneficial, knowledge of MOD environment and culture. Ability to operate standard SOC tools (SIEM), incident investigation, detection engineering Embedded with an existing Customer SOC, Capgemini supply a level of cyber expertise and corporate experience, assisting the customer in regular SOC activities, as well as proposing new processes and bringing 'best practice' to the workplace. Must be a sole British National. Hybrid working: The position is office based, with a local agreement with the customer that allows for a limited amount of Working from Home, based around your role, your needs, and those of the business. The current agreement requires 60% attendance in the office. If you are successfully offered this position, you will go through a series of pre-employment checks, including: identity, nationality (single or dual) or immigration status, employment history going back 3 continuous years, and unspent criminal record check (known as Disclosure and Barring Service) Your role Conduct reactive monitoring of MOD networks to deliver a layered, agile cyber defence capability across all security domains. Manage and triage alerts; conduct impact assessments and develop mitigating strategies to be briefed up the chain of command. Improve and comply all extant cyber security policies, procedures and orders, review and amend when required. Maintain and share knowledge of current cyber issues, vulnerabilities and exploits through research, technical reports and briefs You can bring your whole self to work. At Capgemini, striving for equity, diversity and inclusion is part of everyday life, and will be part of your working reality. We have built an inclusive and welcoming environment, for everyone. Your skills and experience Experienced Tier 2 SOC analyst Knowledge of Data networks Knowledge & experience with SIEM tool sets and security management tools. Desirable Security Qualifications (CompTIA S+/N+/CySA+, AWS, MS, SANS, CISSP etc.) Ideally have some experience with UK MOD Your security clearance

*SC CLEARED* Security Analyst/Detection Engineer 4 Month contract initially Based: Remote/Corsham - Max 3 days p/w onsite Rate: £500 - £537 p/d (via Umbrella company) We have a great opportunity with a world leading organisation where you will be provided with all of the support and development to succeed. A progressive organisation where you can really make a difference. We have a great opportunity for a Security Analyst/Detection Engineer to join the team for an initial 4 month contract. The ideal candidate will have good Security analyst skills, knowledge of working in a SOC environment beneficial, knowledge of defence environment and culture. You will have the ability to operate standard SOC tools (SIEM), incident investigation, detection engineering Embedded with an existing Customer SOC. Key Responsibilities: * Conduct reactive monitoring of the networks to deliver a layered, agile cyber defence capability across all security domains. * Manage and triage alerts; conduct impact assessments and develop mitigating strategies to be briefed up the chain of command. * Improve and comply all extant cyber security policies, procedures and orders, review and amend when required. * Maintain and share knowledge of current cyber issues, vulnerabilities and exploits through research, technical reports and briefs Key Skills & Experience: * Experienced Tier 2 SOC analyst * Knowledge of Data networks * Knowledge & experience with SIEM tool sets and security management tools. Desirable Security Qualifications: * CompTIA S+/N+/CySA+, AWS, MS, SANS, CISSP etc. * Ideally have some experience with UK defence or military space. This is an excellent opportunity on a great project of work, If you are looking for your next exciting opportunity, apply now for your CV to reach me directly, we will respond as soon as possible. Due to the nature and urgency of this post, candidates holding or who have held high level security clearance in the past are most welcome to apply. Please note successful applicants will be required to be security cleared prior to appointment which can take up to a minimum 10 weeks. LA International is a HMG approved ICT Recruitment and Project Solutions Consultancy, operating globally from the largest single site in the UK as an IT Consultancy or as an Employment Business & Agency depending upon the precise nature of the work, for security cleared jobs or non-clearance vacancies, LA International welcome applications from all sections of the community and from people with diverse experience and backgrounds. Award Winning LA International, winner of the Recruiter Awards for Excellence, Best IT Recruitment Company, Best Public Sector Recruitment Company and overall Gold Award winner, has now secured the most prestigious business award that any business can receive, The Queens Award for Enterprise: International Trade, for the second consecutive period.

We are seeking an experienced SC cleared Associate Security Analyst to join our team. You will support the cybersecurity operations, incident investigation, and response efforts within a dynamic environment. Your responsibilities will include investigating security alerts, analysing threats, supporting incident response activities, and contributing to ongoing improvements in security processes Key Responsibilities: Triage and investigate cybersecurity alerts and user reports Analyze systems, files, network traffic, and cloud environments to determine the nature and extent of cyber incidents Support technical response activities including containment, eradication, and recovery Assist in coordinating cyber incident responses Contribute to post-incident reviews and identify lessons learned Support continual improvement initiatives for incident investigation and response capabilities Collaborate with Cyber Defence teams to enhance overall security posture Contribute to internal plans, playbooks, and knowledge base documentation Line management of apprentice security analysts Experience & Skills Required: 2-3 years' experience in cyber security incident investigation and response Strong knowledge of cyber security threats and attack techniques Hands-on experience with security tools such as EDR, SIEM (Splunk preferred, Microsoft Sentinel or equivalent acceptable) Understanding of threat actor tactics, techniques, and procedures Good analytical, problem-solving, and troubleshooting skills Hands-on experience with Splunk Experience working within an Agile environment Familiarity with cloud platforms such as AWS Please note active SC clearance is required for this role Minorities, women, LGBTQ+ candidates, and individuals with disabilities are encouraged to apply. Interviews will take place next week, so please apply immediately to be considered for this contract role.

Job Title: Cyber Security Incident Response Specialist Location: London, Wokingham, or Warwick (2 days per week onsite - hybrid working) Contract Duration: 6months + initially, with high potential for extension (long-term programme) Clearance: SC required or eligible THIS PROJECT IS INSIDE IR35 Project Overview: We are looking for an experienced Cyber Security Incident Response Specialist to join a high-impact security programme supporting the resilience of UK critical national infrastructure (CNI) . You'll join a team responsible for responding to cyber threats across both cyber and physical domains - helping to manage the full incident life cycle, improve response maturity, and develop scalable IR documentation and exercises. This is a specialist role for someone with real-world IR experience and the ability to assess, escalate, and coordinate technical and business responses. Key Responsibilities: Lead or support incident response (IR) activities across the full life cycle: detection, triage, containment, eradication, recovery, and lessons learned Develop and maintain IR playbooks, plans, and post-incident reports Support post-incident reviews , including root cause analysis (RCA) and lessons learned sessions Design and deliver incident response exercises (eg tabletop simulations) Act as a subject matter expert (SME) for incident response processes and frameworks Collaborate with SOC teams, technical SMEs, and non-technical stakeholders Communicate IR outcomes effectively via reports, presentations, and briefings Build working relationships across internal security functions and external CNI/regulatory stakeholders Mandatory Requirements (Must-Have): Strong, recent experience in cybersecurity incident response Ability to make informed decisions during incidents (triage, escalate, communicate) Experience working in Critical National Infrastructure (CNI) sectors - eg utilities, energy, telco, banking, health, defence, or transport Working knowledge of NIST, MITRE ATT&CK , or equivalent frameworks Proven ability to communicate IR findings to technical and non-technical audiences Experience contributing to or owning IR playbooks, SOPs, or RCA documentation Must hold current SC clearance or have been previously cleared within the last 12-18 months Desirable Skills (Nice-to-Have): Experience within the energy or utilities sector Exposure to OT/ICS environments (eg SCADA, PLCs, DCS) Experience delivering or supporting tabletop IR exercises Familiarity with tools like Microsoft Sentinel, Defender, Splunk, QRadar, Tenable, CrowdStrike, etc. Industry certifications such as CISSP, GCFA, GEIR, CCIM, CISM, CEH , or equivalent What We're Not Looking For: Junior SOC analysts (L1/L2 triage only) Generalist cyber roles without deep IR exposure Candidates without experience in CNI or enterprise-scale IR

SOC Manager 6 Month contract initially Based: Hybrid/Leamington & Gaydon - Hybrid as per business need Rate: £Market rates p/d (via Umbrella company) We have a great opportunity with a world leading organisation where you will be provided with all of the support and development to succeed. A progressive organisation where you can really make a difference. We have a great opportunity for a SOC Manager to join the team. As SOC Manager you will: * Oversee SOC activities by reviewing your team's performance metrics, incident reports and other key indicators * Lead incident response efforts when a security incident occurs, the SOC team has to respond as quickly as possible * Lead these efforts by establishing clear incident response procedures and protocols and conveying them to the team * Analyse incident reports to understand your organization's security posture by reviewing incident reports, SOC managers identify patterns and trends that may indicate weaknesses or vulnerabilities in their security defences * Serve as the point of contact (POC) for security incidents within the company. You are the primary liaison between the SOC team, other internal stakeholders, and external parties such as vendors, clients or regulatory bodies. * Be responsible for conducting information security investigations as a result of security incidents. These are previously identified by the Level 2 security analyst who are monitoring the security consoles from various SOC entry channels (SIEM, Tickets, Email and Phone) End to end security incident management. You will play a key role in providing the highest level of technical expertise and handling the most complex security incidents. Key Responsibilities: * Manage service and process improvements of SOC, auditing SOC incidents, identifying new use cases and automations * POC for SOC engineering team, threat intelligence analyst and Threat exposure management * Act as a point of escalation for Level-2 SOC security analysts in support of information security investigations to provide guidance and oversight on incident resolution and containment techniques * Act as the lead coordinator to individual information security incidents * Mentor security analysts regarding risk management, information security controls, incident analysis, incident response, SIEM monitoring, and other operational tasks (tools, techniques, Procedures) in support of technologies managed by the Security Operations Centre. * Document incidents from initial detection through final resolution * Ensure threat management, threat modelling, identify threat vectors and develop use cases for security monitoring * Create reports, dashboards, metrics for SOC operations and presentation to Sr. Mgmt. * Act as focal point for any investigations involving security; to prepare reports and note follow up action * Participate in the role of Incident Manager during any incidents and emergencies * Ensure that all business recovery/contingency plans and/or procedures held within the security control rooms are always kept up to date * Coordinate with IT teams on escalations, tracking, performance issues, and outages Key skills & experience: * Strong knowledge in Authentication, End Point Security, Internet Policy Enforcement, Firewalls, Web Content Filtering, Database Activity Monitoring (DAM), Public Key Infrastructure (PKI), Data Loss Prevention (DLP), Identity and Access Management (IAM) and SOC advancements such as EDR and SOAR * Good knowledge of SIEM technologies, like Google Chronicle, Splunk ES or QRadar * In-depth familiarity with security policies based on industry standards and best practices * Experienced within the information security field, with emphasis on security operations, incident management, intrusion analysis, security device installations, configuration, and troubleshooting (e. g., Firewall, IDS, etc.) * Experience in Log source integration and in Developing new correlation rules & Parser writing * Experienced in SOC automation development, cloud operations (e. g. AWS), Designing, building security operations centers and Regulatory Compliance * Ability to lead and communicate efficiently within a team environment along with Incident management process development and/or incident management experience * Solid understanding of information technology and information security required * Excellent communication and presentation skills with demonstrated skill in presenting analytical data effectively to varied audiences (including executives) * Ability to work well under pressure with differing levels of Management This is an excellent opportunity on a great project of work, If you are looking for your next exciting opportunity, apply now for your CV to reach me directly, we will respond as soon as possible. LA International is a HMG approved ICT Recruitment and Project Solutions Consultancy, operating globally from the largest single site in the UK as an IT Consultancy or as an Employment Business & Agency depending upon the precise nature of the work, for security cleared jobs or non-clearance vacancies, LA International welcome applications from all sections of the community and from people with diverse experience and backgrounds. Award Winning LA International, winner of the Recruiter Awards for Excellence, Best IT Recruitment Company, Best Public Sector Recruitment Company and overall Gold Award winner, has now secured the most prestigious business award that any business can receive, The Queens Award for Enterprise: International Trade, for the second consecutive period.