This website uses cookies to ensure you get the best experience. Ekco and our selected partners use cookies and similar technologies (together “cookies”) that are necessary to present this website, and to ensure you get the best experience of it. If you consent to it, we will also use cookies for analytics and marketing purposes. See our Cookie Policy to read more about the cookies we set. You can withdraw and manage your consent at any time, by clicking “Manage cookies” at the bottom of each website page. ek.co Mail Security Operations Centre Ekco UK - Milton Keynes, Dublin - Ekco Fully Remote SOC Analyst Founded in 2016 Ekco is now one of the fastest growing cloud solution providers in Europe! About Ekco Founded in 2016 Ekco is now one of the fastest growing cloud solution providers in Europe! We specialise in enabling companies to progress along the path of cloud maturity, managing transformation and driving better outcomes from our clients’ existing technology investments. In a few words, we take businesses to the cloud and back! We have over 1000 highly talented and supportive colleagues (and counting) across a number of regional offices in the UK, Benelux & Ireland. The role Reporting to the regional Security Operations Lead, the role of the SOC Analyst is to apply the understanding of investigative techniques and analytical skills, to defend against and respond to cybersecurity events and incidents in our client’s IT environments. You will support clients by ensuring they remain secure. You will work as part of a team to deliver monitoring and protection in both a reactive and proactive manner. You will also be responsible for rolling out security tools including creating documentation. SOC Analysts at Ekco are operationally focused; they secure and monitor systems using advanced toolsets, to prevent security breaches and to respond to incidents as they arise. Day To Day Your Role Will Involve Performing accurate and precise real-time analysis and correlation of logs/alerts from a multitude of client systems. Analysing and assessing security incidents and advancing to client resources or collaborating with internal teams for additional assistance Determining if events constitute security incidents e.g.: security events and incidents from SIEM/EDR. Assigning and escalating tickets in accordance with defined SLAs. Recommending tuning for security engineers to develop/adjust SIEM rules and reduce false positives. Raising incidents to appropriate Seniors or Incident Response for major security issues. Recognising potential, successful, and unsuccessful intrusion attempts and compromises thorough reviewing and analysing relevant event detail and summary information Monitor identity and access management, including monitoring for abuse of permissions by authorised system users. Participate in cyber-security exercises and training. Deliver best in class customer service, communicating with clients frequently. Responding to inbound requests via phone, emails or tickets. Documenting actions in cases to effectively communicate information internally and to client. Reporting common and repeat problems (trend analysis) to management and propose process and technical improvements. Providing cover in line with rotating shift patterns. You should be flexible to rotating 12 hour shifts. We provide 24/7 cover to clients and shifts are allocated accordingly. Performing other duties as assigned. About You Keen problem solving/ troubleshooting skills Strong analytical skills and a logical approach to resolving issues A can-do attitude Excellent written and verbal communication skills. You should be able to communicate technical details clearly The ability to adjust and adapt to changing priorities in a dynamic environment A pro-active approach to addressing issues and requests and the ability to multitask The ability to learn new technologies and concepts quickly Great organisational skills and attention to detail Adaptability to do a range of work, including the complex, non-routine, mundane and multi-environment Able to work under direction, use discretion and determine when to escalate issues Effective communication, teamwork and task-time management skills Desirable Prior experience in an MSSP environment Prior experience working with SIEM and EDR – E.g. SentinelOne, Microsoft security stack (Defender, Sentinel), Carbon Black, Rapid7 IDR, CrowdStrike, QRadar Industry recognised certifications – E.g. CompTIA Security, CySA, Microsoft SC-200, SBT L1/L2 etc. Theoretical or practical knowledge in the following areas: Unix, Linux, Windows, etc. operating systems MITRE ATT&CK framework and adversary Tactics, Techniques and Procedures (TTPs) Intrusion analysis Creation/tuning of detection analytics Exploits, vulnerabilities, network attacks Benefits/Perks Time off - 25 days leave public holidays x1 day Birthday leave per year Company Pension Scheme (employer contribution 5%) flexible salary sacrifice Employee Assistance Programme (EAP) - access to dedicated mental health, emotional wellbeing and general advice EkcOlympics - a global activity for fun! Learning & development - Unlimited access to Pluralsight learning platform A lot of responsibilities & opportunities to grow (also internationally) Why Ekco ️ Microsoft’s 2023 Rising Star Security Partner of the year VMware & Veeam top partner status Ranked as 4th fastest growing technology company in the Deloitte Fast50 Awards Ekco are committed to cultivating an environment that promotes diversity, equality, inclusion and belonging We recognise the value of internal mobility and encourage opportunities for internal development & progression Flexible working with a family friendly focus are at the core of our company values Department Security Operations Centre Locations Ekco UK - Milton Keynes, Dublin - Ekco Remote status Fully Remote Job Openings Principal - Security Operations Security Operations Centre Ekco UK - Milton Keynes Fully Remote Lead - Security Operations Security Operations Centre Ekco UK - Milton Keynes Fully Remote Senior Enterprise Security & Data Protection Consultant Security Operations Centre Dublin - Ekco Hybrid More jobs Security Operations Centre Ekco UK - Milton Keynes, Dublin - Ekco Fully Remote SOC Analyst Founded in 2016 Ekco is now one of the fastest growing cloud solution providers in Europe! Loading application form Jobs Data & privacy ek.co/ Employee login Candidate Connect login Dutch Applicant tracking system by Teamtailor