SOC Analyst - London, Hybrid - £460 p/d Outside IR35 - SC Cleared

SOC Analyst - London, Hybrid - £460 p/d Outside IR35 - SC Cleared

One of our public sector clients is looking for an experienced SOC Analyst to join them for a 6 month initial contract. They are offering £460 per day OUTSIDE IR35.

Our client is based in London and they are offering hybrid working, with 2-3 days per week onsite.

This role is working in a Security Cleared environment. You will need to be SC or DV (developed vetting) cleared or eligible to undertake SC or DV Security Clearance.

As the SOC Analyst, you will support the continuous monitoring, detection, triage and response to cyber security events across a UK public sector environment. You will play a critical part in identifying, investigating and responding to threats across systems, identities, networks, cloud platforms and data, while continuously improving detection capability through tuning, automation and threat-informed defence. As the SOC Analyst, you will contribute directly to outcomes under the NCSC Cyber Assessment Framework (CAF), in particular Objective C (Detecting Cyber Security Events) and Objective D (Minimising the Impact of Cyber Security Incidents).

Skills and Experience Required:

- Strong commercial experience working as a SOC Analyst across security monitoring and incident response

- Sound knowledge of SOC operations, alert tiering, triage and incident workflows

- Hands-on experience with SIEM platforms, including querying, correlation and investigation

- Experience with EDR/XDR tooling and endpoint telemetry

- Identity security experience (eg Entra ID, authentication flows, MFA abuse)

- Cloud security monitoring across AWS, Azure and M365

- Solid network fundamentals (DNS, HTTP/S, TCP/IP)

- Log analysis across authentication, endpoint, Proxy, DNS and cloud sources

- Knowledge of incident response frameworks and methodologies (NIST SP 800-61 Rev. 3, NCSC incident management guidance)

- Working knowledge of threat intelligence, threat-informed defence and MITRE ATTCK

- Detection engineering experience - desirable

- Scripting and query languages (KQL, SPL, Python) - desirable

- SOAR and automation tooling - desirable

- Experience operating within NCSC CAF/GovAssure or similarly regulated assurance environments - desirable

- Relevant certifications (eg CySA+, BTL1, GIAC GCIH/GCIA) or equivalent demonstrable experience - desirable

If you think you'd be a good fit for this role, please apply here. We look forward to hearing from you!

SmartSourcing are a Disability Confident Employer and we promote, celebrate and value diversity, we are committed to promoting equality and inclusion for all.