Level 1 SOC Analyst

Telefónica Tech (part of the Telefónica Group) is a leading NextGen Tech solutions provider with a highly diversified team of over 6,000 exceptionally skilled employees and +60 nationalities. We serve more than 5.5m customers every day in over 175 countries, with a global ecosystem of market-leading partners. Global strategic hubs: Spain, Brazil, the UK, Germany. The Telefónica Tech UK&I hub has an end- to-end portfolio of market leading services and develops integrated technology solutions to accelerate digital transformation through: Cloud, Data & AI, Enterprise Applications, Workplace Services and Cyber Security & Networking. Values: Open, Trusted and Bold Trusted Partners: Microsoft: Top 3 Service Providers, Azure Expert Status, Fastrack & Inner Circle Partner HPE: Platinum Partner – FY23 UK&I Solution Provider of the Year Palo Alto & Crowdstrike: part of our NextDefense Cyber Security Portfolio Fortinet: Elite VIP Program – one of only 2 in the UK AWS: Advanced Solution & Managed Service Provider Program Due to expansion, we’re now recruiting for a Cyber Security Analyst – L1. The Security Operation Centre (SOC) Information Security Analyst is the first level of monitoring in the SOC. The position monitors and responds to security events from managed customer security systems as part of a team on a rotating 24 x 7 x 365 basis. Your background should include exposure to security technologies including SIEM/EDR, firewalls, logging, monitoring and vulnerability management. You should understand network security practices. Excellent customer service while solving problems should be a top priority for you. Telefonica Tech is a fast-paced, entrepreneurial environment so to be successful you’ll need to be a pro-active individual, take direction well, communicate succinctly and collaborate effectively. Key Responsibilities Ability to clearly explain technical concepts to non‑technical stakeholders. Recommend enhancements to SOC security process, procedures and policies. Communicate effectively with customers, teammates, and management. Provide further detail on incidents should they arise, this can include, basic level sandboxing, IP reputation or further detailing of IOC’s. Can provide base level remediation (blocking user accounts, isolating servers) to then triage for Level 2 for further investigation. Analyse and report on anomalous behaviour. Determines and directs Advanced remediation and recovery efforts (with assistance from tooling and/or Level 2) Investigate alerts using SIEM, data visualisation, pattern analysis and automation. Skills and Experience Solid cyber security skills including SIEM Have the drive to dive deep into issues Ability to identify security threats, trends and anomalies Logical thinker and creative problem solver CompTIA Security+, CompTIA CySa+, Microsoft SC-200. If you are currently studying towards any of these, we still want to hear from you. At Telefónica Tech, we believe inclusion is the bridge that empowers everyone to be their authentic selves. We celebrate and respect our differences because diversity drives innovation and makes us stronger. Be yourself with us, and feel that you belong. We welcome applicants from all backgrounds and identities regardless of age, disability, gender reassignment, marital or civil partnership status, pregnancy or maternity, race, religion or belief, sex, and sexual orientation. We are also committed to equity, accessible hiring practices, and creating an inclusive culture through many means including TogetHer (Women's network) and our Employee Resource Groups which include Diversity and Inclusion, Telefónica Tech Pride, Neurodiversity, ELEVATE (African and Caribbean heritage network), and Sustainability. We don’t believe hiring is a tick box exercise, so if you feel that you don’t match the job description 100%, but would still be a great fit for role, please get in touch.