Overview
BAE Systems re seeking a Level 1 SOC Cyber Analyst to join the TMCT security team within the FCAS DI function. This role will act as the first internal responder to cybersecurity alerts generated by our outsourced Security Operations Centre (SOC).
1. Review and assess alerts escalated by the outsourced SOC, validating accuracy and determining potential impact.
2. Perform first-line analysis using tools such as SIEM platforms, device logs and firewall logs.
3. Work directly with end users and asset owners to gather additional information and guide immediate containment actions such as asset isolation or password resets.
4. Escalate confirmed or high-severity incidents to Level 2 SOC analysts or internal response teams with clear and accurate documentation.
5. Maintain detailed case notes, timelines and evidence within the case management system to support investigations and compliance requirements.
6. Act as a key communication point between the internal security team and external SOC provider.
7. Follow established triage and escalation procedures and suggest improvements where appropriate.
Skills
8. 2–4 years’ experience in a SOC, IT operations or cybersecurity support role.
9. Understanding of key cyber threats such as malware, phishing, lateral movement and privilege escalation.
10. Working knowledge of network fundamentals, authentication systems and Windows/Linux system logs.
11. Experience using SIEM platforms such as Microsoft Sentinel, Splunk, Elastic or QRadar.
12. Experience using ticketing or case management systems such as Jira, ServiceNow or The Hive.
13. Strong analytical and investigative skills with the ability to interpret alerts and security logs.
14. Excellent written and verbal communication skills.
Please note – you must be eligible for SC and DV clearance