Cyber Security Analyst – SOC

About the role

As a Cyber Security Analyst in the Security Operations Centre (SOC) you will be the first line of defence against cyber threats targeting Admiral Insurance’s critical financial systems, customer data and user accounts. Working in a 24/7 global environment across three regions, you will monitor, triage and escalate security alerts while collaborating closely with colleagues worldwide.

Key responsibilities

• Monitor alerts from SIEM platforms, endpoint detection tools and identity‑access systems.
• Perform initial triage to validate true positives, classify severity and assess potential impact on financial systems or users.
• Investigate incidents using login activity, endpoint processes, files, network connections and known indicators of compromise.
• Gather evidence and document findings before escalating to Level‑2 analysts.
• Execute predefined playbooks and response procedures, ensuring consistent and accurate actions.
• Provide structured handovers at shift end, summarising active incidents, outstanding actions and relevant evidence.
• Maintain detailed case notes that meet audit and regulatory standards and contribute to continuous learning activities.

Required profile

• Minimum two years’ experience as a Cyber Security Analyst or in a comparable SOC role.
• Hands‑on experience with SIEM or endpoint detection tools.
• Solid understanding of networking concepts (IP, DNS, HTTP) and Windows fundamentals.
• Strong attention to detail and ability to follow structured processes.
• Good written and verbal communication skills.

Required skills

• SIEM platforms
• Endpoint detection and response tools
• Networking (IP, DNS, HTTP)
• Windows operating system fundamentals
• PowerShell scripting
• Python scripting