SOC Analyst

About Resillion

Resillion is a global provider of digital assurance, cybersecurity, and testing services. We help organisations strengthen their security posture, protect critical assets, and deliver high-quality digital solutions. Our teams operate across multiple specialist disciplines, including Digital Forensics, Incident Response, SOC Operations, Quality & Compliance, and Technical Consultancy. We are committed to excellence, continuous improvement, and delivering trusted, customer-focused services that meet the highest professional and accreditation standards.

Key Responsibilities

• Analyse security incidents to identify the root cause.
• Investigate, document, and report on information security issues and emerging trends.
• Analyse Threat Intelligence sources for proactive identification of emerging threats.
• Participate in evaluating the security of monitored infrastructure systems and take part in recommending additional security solutions where appropriate.
• Participate in improving internal incident response processes.
• Assist with the creation and maintenance of Playbooks and Runbooks.
• Recommend enhancements to SOC security process, procedures, and policies.
• Provide vulnerability management and monitoring service to customers through vulnerability scanning tools.
• Integrate and share information with other analysts and other teams.
• Assist with reporting and documentation work as needed.

Required Skills and Qualifications

• Security monitoring experience with one or more SIEM technologies, preference is Microsoft Sentinel.
• Tuning of SIEM environment and creation of additional monitoring rules.
• Strong understanding of networking principles including TCP/IP, WANs, LANs, and commonly used Internet protocols.
• Strong understanding of Windows, Linux and cloud technologies.
• Good understanding of security solutions including SIEMs, Web Proxies, Anti-Virus, Firewalls, VPN, authentication providers and mechanisms, encryption, IPS/IDS.
• Good understanding of security incident management, malware management and vulnerability management processes.
• Attention to detail and quality.
• Should have MSSP experience along with strong communication skills.
• Comfortable working in rotational shifts.

Desirable Skills and Qualifications

• AZ-500 Microsoft Azure Security Technologies and/or SC-200 Microsoft Security Operations Analyst.
• Knowledge of Microsoft Kusto Query Language (KQL).
• Knowledge of CrowdStrike Falcon.
• Prior experience with handling or managing Cyber Incident Response (NIST).
• Familiarity with ITIL practices regarding incident, problem and change management.

Why Join Resillion?

• Opportunity to work within a growing and highly skilled Security Operations team.
• Exposure to a wide range of customer environments and security technologies.
• Career development and certification support.
• Collaborative and supportive working environment.
• Flexible hybrid working options.
• Opportunity to help organisations protect themselves against evolving cyber threats.

Apply

If you have experience in security operations, enjoy investigating threats and incidents, and are looking to develop your cybersecurity career within a leading digital assurance and cyber services organisation, we'd love to hear from you.