SOC Analyst Level 3

Job Description:

Responsibilities

·    Develop and implement innovative ways to detect threats and identify anomalous behaviours in a high-sec environment

·    Find, assess, and distribute relevant CTI across the monitoring team and report/share findings to internal/external security stakeholders.

·    Act as the point of contact during security incidents, taking a position of leadership to coordinate and communicate information across technical and non-technical members of staff.

·    Drive and participate in proactive hunting campaigns to proactively identify potential security gaps and emerging threats across customer environments.

·    Lead technical deep-dive investigations of complex security incidents and create comprehensive post-incident analysis reports with actionable recommendations.

·    Lead internal team meetings and present information in customer lead workgroups.

·    Develop and support SOC staff, helping individuals with their career growth and personal development.

·    Contribute to technical forums within DXC and customer environments.

·    Travel to/from customer sites as required.

·    Participation in an on-call rota.

Knowledge and Skills

Required

·         Understanding of networking concepts including IP addressing, protocols, and traffic flows in a high-sec environment.

·         Understanding of Windows and Linux Operating Systems including terminal basics, file systems, and authentication mechanisms as well as ability to recognise misuse.

·         Knowledge of LOLBins and how COTS software can be weaponised.

·         Knowledge of relevant threat actors, TTPs, and detection methods against these activities.

·         Knowledge in how to ingest and act upon relevant IOC/IOA’s, as well as being able to generate CTI.

·         Experience with content engineering using ElasticStack.

·         Familiar with open-source intelligence (OSINT) techniques to aid in identifying potential threats and gathering information.

·         Able to communicate simple technical issues to non-technical individuals in a clear and understandable way.

·         Able to manage personal workload effectively and to delegate tasks across shift team.

·         Show initiative in learning new technologies and techniques, leveraging internal resources and training to grow professionally.

·         Ability to lead team members and to encourage/grow their knowledge.

Desirable

·    IT or security related certifications (e.g. CompTIA SecurityX, CISSP, CISM, CSM)

·    Work experience in high sec environments

·    Experience using Elastic Stack or other SIEM tools

·    Currently held SC/DV UKSV clearance

Other Requirements

·    Currently held or eligibility to obtain UKGov DV clearance

·    Full Driving Licence

·    Fluent in written and spoken English

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.