How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Graduate SOC Analyst
CyPro Cybersecurity SOC Analyst Must be UK based – Only apply if you meet all 5 minimum requirements below.
What We’re Offering
- Salary: £27,000 + overtime
- Holiday: 25 days + bank holidays, increasing by 1 day annually (up to 30 days)
- Flexible Working: 3 days in-office (Canary Wharf, 39th floor), remainder remote
- Working Hours: Mon–Fri, 9:00 AM – 5:30 PM
- Training: £1,000/year budget for certifications/courses
- Socials: Drinks, axe-throwing, and team bonding
- Start Date: September/October 2026
🚩 Minimum Requirements (Non-negotiable)
Fail any, application rejected.
✅ Education: Degree or apprenticeship in:
- Cybersecurity
- Information Security
- Computer Science (or equivalent)
✅ Experience: 6+ months in a SOC environment (placement, internship)
✅ IT Literacy: Proficient in Microsoft 365 (Outlook/calendar, Word, Excel, PowerPoint)
✅ English Fluency: Business-level written & spoken English
✅ Location: Within 1-hour commute of Canary Wharf, London
About Us: CyPro
We’re a fast-growing UK-based cybersecurity startup on a mission to revolutionise small and medium enterprise (SME) protection—a market overlooked by bigger vendors.
DRIVEN BY FOUNDERS who previously served enterprises and UK government, we build innovative security solutions for SMBs, helping them scale securely.
Returning to a new way of working, we’re hiring self-starters, troubleshooters, and builders who thrive in agile environments.
The Role: SOC Analyst (Hybrid Monitoring & Security Operations)
This is NOT a traditional SOC role—you’ll work across: ⚡ Monitoring & incident response ⚡ Detection engineering ⚡ Threat intelligence & automation ⚡ Security compliance
Our Security Operations Centre (SOC) is small, hungry to grow, and your ideas will shape our future.
As the team expands, you’ll specialise in areas like: 🔍 Threat hunting 🚨 Incident response leadership 🤖 Platform automation
Come if you’re ambitious, capable in zero structure, and want to build something meaningful. Leave if you’re content following manuals.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Core Responsibilities
Security Monitoring & Incident Response
- Monitor alerts from Microsoft Sentinel, Defender, Datadog, Elastic
- Triage and investigate highlights independently (assess severity, isolate threats)
- Execute *containment and remediation using runbooks
- Correlate data across systems to spot malicious patterns and attacker behaviour
- Document incidents in JIRA Service Management:
- Detailed reports, Root Cause Analysis (RCA), after-action reviews
- Communicate learnings to clients & internal teams
Detection Engineering
- Develop new detection rules in Microsoft Sentinel aligned to MITRE ATT&CK
- Dig into KQL queries for threat hunting & forensic analysis
- Refine detection rules after false-positive/negative analysis
- Improve detection based on emerging threats and global TTPs
Threat Intelligence
- Consume threat feeds to spot IOCs (Indicators of Compromise) & TTPs (Tactics, Techniques, Procedures)
- Tag and enrich observations for proactive intelligence
- Participate in weekly threat-hunting sprints
Client Reporting & Support
- Compile weekly/monthly SOC reports highlighting trends, incidents, and action plans
- Present findings in governance meetings for senior stakeholders
- Demo detected threats to clients, resolve coverage/response queries
Internal Security
- Manage CyPro’s own security stack:
- AD, identity management, grouping policies
- Device hardening via MDM platform
Process Improvement & Automation
- Propel workflows with Azure Logic Apps to automate repetitive responses
- Revise runbooks & knowledge archives
- Challenge limitations and propose technical fixes (e.g., tooling, visibility gaps)
Professional Development
- Maintain certifications (SC-200, AZ-500 suggested)
- Stay updated on attack trends, mitigation strategies
- Share insights via internal new ideas circles
Who We Need You To Be (A Match Made in SOC)
✨ Core Traits
Self-Starter
- Weghold a mix of curiosity and ownership—no "that’s not in the RACI"
- Routinely testify about routes you can’t unbuild
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Ambitious Without Being雄 -= Impose practicing the guise to make now’s goals but ultimately
- Push yourself without testing recent wins
Always Improving
- Cyber is never updated—you’ll always have something to learn
Technical Must-Haves
🔹 [**Must do Microsoft's core SOC tools]
- KQL: Write & reveal *queries for threat cycling and forensics
- Scheduler/Detectors: Join & advance rules around MITRE ATT&CK
- Microsoft’s Defender, Sentinel, and modern defenses
🔹 SOC readiness & ঐ response on:
- SIEM (SIEM, IDS, IPS **interact young and sophistication )
- Threat-headed platforms
- Scales like ATT&CK
- Microsoft Defender/XDR & datas kik
🔹 Automation vs. Manuality
- Experience with Logic Apps, curdy workflow scripts or provider editor
- Wants show automation work making reach improvement paths you see
🔹 Cxxling & Debugging: Fundamentals of scripting/bash (Azure/Azure virtual touch)
Soft Skills Required
- A gear grid to minimize Triashing & containing threats without panic
- Data hacking: Treat datasets like forensic reports
- Service on technically complex information for both deals and teams
- Comfort in ambiguity * work in a either knowledge and take decisions
- Accountable & adaptable: Want lookup taught listening to what you done on fair and anonymity, and keep learning with your abole
Hiring 3-day Process
-
Video Intro (remote)
- "++ min recorded [CV] spin covering **experience & your embrace of SOC" (prompt provided)
-
Initial Discussion (remote)
- From staffing team: Straight chat to align job salary & SOC
-
Assessment Center (London, no prep)
- Project hands-on feel over an ununder big challenge
- Technical challenges
- Single session in the well with the CEO.
Done! This is both you exciting—**being our most questions about are you!)
CyPro. Because builder should stay blockers. Apply there! ⚡
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location