IBM
Senior SOC Analyst (24/7 Shift) - Public Sector
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Technical Consultant – Threat Detection, Response & Intelligence
IBM Consulting UK FutureNow
At IBM Consulting UK FutureNow, you’ll build a career at the forefront of hybrid cloud and AI, working with leading clients across the public and private sectors.
You’ll collaborate with top industry professionals, gain hands-on experience with cutting-edge technologies, and deliver solutions that create real business impact. From day one, you’ll work on meaningful, high-profile programmes that stretch your skills and accelerate your growth.
We invest heavily in you—supporting continuous learning, in-demand skills development, and long-term career progression. You’ll thrive in a flexible, inclusive environment that values curiosity, encourages reinvention, and recognises what makes you unique.
What We Offer
-
Work-life balance support: Flexible working approaches, sabbatical programmes, paid paternity leave, maternity leave, and an innovative maternity returners scheme
-
Traditional benefits:
- 25 days’ holiday (in addition to public holidays)
- Private medical, dental & optical cover
- Online shopping discounts
- Employee Assistance Programme
- Life assurance
- Group pension plan via salary sacrifice
The Role: Technical Consultant (Threat Detection, Response & Intelligence)
As a Technical Consultant specialising in Threat Detection, Response & Intelligence, you will support and lead the monitoring, detection, and initial response to cybersecurity threats within a 24×7 SOC consulting environment.
You will play a key role in maintaining operational excellence on shift, supporting incident investigation, and ensuring consistent delivery of high-quality security operations across client environments.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Working across SIEM platforms, security tooling, and incident response workflows, you will help identify, triage, and escalate threats effectively while improving SOC processes and capabilities.
This is a hands-on operational role, combining incident leadership, team support, quality assurance, and exposure to client environments and senior stakeholders.
Key Responsibilities
- Monitor, triage, and investigate security alerts and incidents across SIEM and security platforms
- Lead or support incident response activities, including:
- Initial investigation
- Containment coordination
- Escalation to relevant teams
- Act as a senior shift presence, supporting Tier 1/2 analysts and ensuring smooth SOC operations
- Drive incident quality and consistency, ensuring playbooks and procedures are followed
- Support major incident initiation and coordination, bridging technical and non-technical stakeholder communication
- Analyse security events to identify:
- Patterns
- Threat behaviours
- Opportunities for process improvement
- Contribute to playbook development and enhancement for operational efficiency
- Collaborate with detection and engineering teams to:
- Improve alert quality
- Reduce false positives
- Strengthen operational effectiveness
- Produce clear and structured incident reports and handovers
- Participate in shift handovers, retrospectives, and continuous improvement activities
- Support client interactions where required, providing updates and operational insights
Education & Experience
Required Qualifications
- Bachelor’s Degree (Preferred but not strictly mandatory)
Required Technical & Professional Expertise
- Proven experience working in a SOC environment (Level 2/3 L2/L3) within a 24×7 operational setting
- Strong experience with SIEM platforms, including:
- Microsoft Sentinel
- QRadar
- Splunk
- Elastic (SIEM) or similar
- Practical experience in:
- Incident triage and investigation
- Security event analysis
- Alert validation and escalation
- Understanding of:
- Incident response processes and workflows
- Threat detection methodologies
- Exposure to security tooling, including:
- EDR/XDR platforms
- Network security technologies
- Identity and access management (IAM) systems
- Ability to interpret logs and identify suspicious behaviour across:
- Endpoints
- Networks
- Cloud environments
- Strong communication skills to clearly articulate incidents and risks to stakeholders
- Experience working in client-facing or service-based environments
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Note: This role is subject to UK Government’s Baseline Personnel Security Standard (BPSS). Additional security vetting (NVS) may apply, including requirements for Security Check (SC) or Developed Vetting (DV).
Preferred Qualifications & Experience
- Experience as a SOC shift lead or senior escalation point
- Threat hunting or detection improvement exposure
- Familiarity with:
- MITRE ATT&CK® framework
- Threat intelligence integration
- Experience with SOAR platforms and automated response workflows
- Relevant certifications, such as:
- SC-200 (Microsoft Secure Cloud Engineer)
- GCIH / GIAC (e.g., GIAC Certified Incident Handler)
- Vendor SIEM certifications
- Working knowledge of SOC performance metrics and continuous improvement strategies
- Experience in regulated or public sector environments
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills