Free-Work UK
SOC Analyst
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
At CGI, you’ll help strengthen the cyber resilience of critical UK programmes by building the data and detection capabilities that underpin an effective Security Operations Centre. Joining our Space, Defence and Intelligence business, you’ll work with customers and experienced colleagues to onboard secure cloud environments, engineer security data pipelines and develop practical detection content.
This is an opportunity to take ownership of meaningful technical work while expanding your skills across Oracle Cloud, Elastic and other major cloud platforms. You’ll have the freedom to explore better ways of detecting threats, with the guidance and support of a collaborative team around you. Whether you’re developing your cyber career or ready for your next challenge, you can make a tangible contribution to protecting important services.
Company Overview
CGI was recognised in the Sunday Times Best Places to Work List 2025 and has been named a UK ‘Best Employer’ by the Financial Times. We offer a competitive salary, excellent pension, private healthcare, plus a share scheme (3.5% + 3.5% matching) which makes you a CGI Partner not just an employee. We are committed to inclusivity, building a genuinely diverse community of tech talent and inspiring everyone to pursue careers in our sector, including our Armed Forces, and are proud to hold a Gold Award in recognition of our support of the Armed Forces Corporate Covenant. Join us and you’ll be part of an open, friendly community of experts. We’ll train and support you in taking your career wherever you want it to go.
Role Requirements
Due to the secure nature of the programme, you will need to hold UK Security Clearance or be eligible to go through this clearance. This role requires full-time onsite working in Chippenham within a restricted working environment. Applicants who already hold Security Clearance are welcomed and will need to be willing and eligible to progress to a higher level of clearance where required. Additional payments are available for full-time onsite working and for working within the restricted environment.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Candidate Profile
In this role, you will join CGI’s Data and Detection Engineering team, supporting the onboarding of new customers into the Security Operations Centre (SOC). You’ll work directly with customers to understand their environments and requirements before helping design how security data is ingested into Elastic. With a primary focus on Oracle Cloud and opportunities to build exposure to AWS, Microsoft Azure and Google Cloud, you’ll develop detection logic and triage guidance that enables the SOC to identify and respond to potential threats effectively.
Key Responsibilities
- Engineer & Deliver: Design and support security data ingestion pipelines into Elastic for newly onboarded customers.
- Develop & Detect: Draft detection rules against defined cyber security use cases and create clear SOC triage guides.
- Engage & Onboard: Liaise directly with customers to gather the technical information required for successful SOC onboarding.
- Monitor & Triage: Review security alerts from SIEM, intrusion detection, log monitoring and other security systems, assessing severity and potential impact.
- Investigate & Escalate: Support security incident investigations and recommend appropriate containment, eradication or escalation actions.
- Analyse & Respond: Monitor client environments, investigate alerts and respond to real or suspected cyber security incidents within agreed timescales.
- Learn & Improve: Research emerging threats, technologies and security practices, sharing knowledge with colleagues and contributing to continuous improvement.
- Support & Assure: Assist with security investigations, exercises, testing, change activities and first-line technical support.
- Operate & Automate: Help ensure scheduled security jobs and automated processes operate correctly and reliably.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Required Qualifications
To be successful in this role, you’ll have a technical foundation in cyber security, computing, software engineering, digital forensics or a related discipline, combined with an interest in developing hands-on expertise in security monitoring and detection engineering. You don’t need to know every technology from day one: we’re looking for technical aptitude, curiosity and sound judgement, together with the communication skills to work effectively with customers and colleagues in a secure environment.
- A technical background or relevant qualification, such as Computer Science, Software Engineering, Cyber Security or Digital Forensics.
- Knowledge or practical experience of SIEM technologies such as Elastic or Splunk.
- An understanding of cyber security monitoring, alerts, incident triage or investigation.
- A general understanding of IT technologies and operating environments, including Linux and/or other enterprise platforms.
- Strong analytical and problem-solving skills with the ability to assess information and determine when escalation is required.
- Strong written and verbal communication skills.
- The confidence to engage directly with customers and collaborate effectively within a technical team.
- An interest in cloud security, with Oracle Cloud experience advantageous and exposure to AWS, Azure or Google Cloud beneficial.
- Existing UK Security Clearance is advantageous; you must be willing and eligible to progress to a higher level of clearance where required.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills