Job Description

Role: Cyber Security Analyst (SOC Analyst)

Location: Corsham - 100% on-site

Day Rate: Up to £640

Contract Length: Until 26th April 2027, with potential for extension

IR35: In scope

Why this could interest you

Rare chance to work in a high-impact, mission-critical Defence environment.

Long-term stability to 2027, with possibility of extension depending on funding.

Tier 2/3 level work - genuinely complex incidents, not just first-line alert handling.

Key responsibilities

Tier 2/3 SOC analysis in an enterprise environment.

Perform triage of security events - determine scope, priority and impact, and recommend rapid remediation actions.

Conduct real-time management of security incidents from detection through to resolution.

Work with SIEM technologies and SIEM engineering, including tool configuration (e.g. ArcSight).

Create and maintain use cases, analytics and playbooks.

Contribute to security monitoring across on-prem and cloud technologies.

Shift pattern & working conditions

13-hour shifts - days and nights, including some weekends.

4 on 5 off, then 5 on 4 off - averaging a standard 37-hour week.

Fully on-site in Corsham.

Essential requirements

Strongly preffeed to have Active DV Clearance (Developed Vetting) and eligibility for Sensitive Post Check.

Industry-standard SOC security qualifications (e.g. SANS, ISC2).

Proven Tier 2/3 SOC Analyst experience (2+ years).

Hands-on experience with SIEM technologies and engineering (ideally including ArcSight).

Experience creating SOC use cases, analytics and playbooks.

Desirable

Degree in a technical, engineering or computing discipline.

Defence / MOD experience.

Previous lead-level SOC experience (though an experienced Tier 2 Analyst would also be considered)