Cybersecurity SOC Analyst II

Responsibilities:  

Security Monitoring & Incident Response  

Monitor and triage security alerts and events across enterprise systems, endpoints, cloud platforms, and networks   

Investigate suspicious activity, indicators of compromise, phishing attempts, malware detections, and unauthorized access attempts   

Escalate validated security incidents to senior analysts or engineering teams as appropriate   

Support containment, remediation, and recovery activities during cybersecurity incidents   

Assist with root cause analysis and incident documentation   

Security Operations & Tool Administration  

Support administration and monitoring of cybersecurity platforms including:   

Microsoft GCC High   

Crowdstrike and other EDR/XDRs  

PIM/PAM Tools  

Various SIEMs  

Azure Sentinel  

Monitor endpoint detection and response (EDR/XDR) alerts and telemetry   

Assist with tuning alerting rules and reducing false positives   

Support vulnerability management and remediation tracking activities   

Help maintain endpoint, identity, and cloud security configurations   

Threat Detection & Analysis  

Review logs and security telemetry from SIEM, endpoint, network, and cloud security platforms   

Identify anomalous or malicious behavior patterns   

Assist with development and improvement of detection rules, playbooks, and response procedures   

Participate in threat hunting and proactive security monitoring initiatives   

Compliance & Documentation  

Support cybersecurity compliance initiatives including UK CE/CE+, ISO 27001 and UK-specific requirements   

Maintain accurate incident records, investigation notes, and operational documentation   

Assist with audit preparation, evidence collection, and remediation tracking   

Follow established security procedures and escalation processes   

Security Awareness & Collaboration  

Collaborate with IT, Engineering, and business teams to improve organizational security posture   

Assist with phishing response and user security awareness efforts   

Contribute to continuous improvement of SOC processes and operational maturity   

Minimum Requirements:

3–5+ years of experience in Cybersecurity, IT support, systems administration, or SOC operations   

Foundational understanding of cybersecurity concepts including networking, endpoint security, identity management, and incident response   

Familiarity with security monitoring and alert triage processes   

Experience working with Managed Security Service Providers (MSSPs) and external vendors  

Experience or exposure to enterprise security platforms such as:   

Microsoft GCC High   

Crowdstrike and other EDR/XDRs  

App Allow/Block-listing tools  

PIM/PAM Tools  

Various SIEMs  

Azure Sentinel  

Strong understanding of Windows, Linux, macOS, and cloud-based environments   

Understanding of SIEM, EDR/XDR, phishing analysis, and log analysis   

Strong analytical, troubleshooting, and problem-solving skills   

Excellent written and verbal communication skills   

Ability to prioritize and manage multiple tasks in a fast-paced environment   

Preferred Requirements:

Experience supporting defense, aerospace, government contracting, or regulated technology environments   

Familiarity with Microsoft GCC High environments   

Familiarity with using AI and LLM tools within the SOC  

Familiarity with monitoring the use of AI and LLM tools  

Exposure to compliance frameworks such as UK CE,/CE+, UK CSM, CIS Controls, or ISO 27001   

Experience with scripting or automation using PowerShell, Python, or Bash   

Familiarity with digital forensic process and chain of custody  

Knowledge of MITRE ATT&CK framework and common threat actor techniques   

Security certifications such as Security+, CySA+, SC-900, Network+, or equivalent   

Experience working in a 24/7 or operational security environment preferred   

  Work Environment:  

Fast-paced, high-growth defense technology startup environment   

Collaborative and highly cross-functional culture with direct access to leadership   

Hybrid work environment with regular interaction across multiple offices in the US, UK and elsewhere.  

May require occasional travel between office locations and customer or government sites   

Work may involve access to sensitive information, secure facilities, and regulated systems  

Why CHAOS?

Health Benefits: private medical, dental and vision benefits (for employees & dependents) will be 100% paid for by the company

Additional benefits : 5% pension match

Compensation Components: competitive base salaries, generous pre-IPO stock option grants, relocation assistance + (coming soon!) annual bonuses

Team Growth: 350 employees and counting across 5 global offices

The stated compensation range reflects only the targeted base compensation range and excludes additional earnings such as bonus, equity, and benefits. If your compensation requirements fall outside of the range, we still encourage you to apply. The salary range for this role is an estimate based on a range of compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations. 

Recruiting Agencies: CHAOS Industries does not accept unsolicited resumes or outreach. Unsolicited submissions will not be reviewed or compensated.

#LI-onsite

 

 

Find Jobs in United Kingdom on Arbeitnow