1,964,179open jobs
116,009companies
248,482added this week
Browse all
Salary
≈ $99k – $225k per year (Estimated)
Location
Remote (likely United States)
Visa
H-1B filings in 12 months: 4 · for this role: 3 · green card filings: 1
Employment
Full-Time

Confirmed on the employer's own hiring board on Oct 24, 2026. First seen by Alion on Sep 6, 2026. NCC Group scores A on the Alion truth index.

Overview
Company
Impact
Profile match
NCC Group is a global cybersecurity and software resilience company that helps organizations protect their critical assets and digital infrastructure. Headquartered in Manchester, United Kingdom, the firm provides an extensive suite of services, including cybersecurity consulting, threat intelligence, and software escrow. Serving thousands of clients worldwide, the enterprise works with businesses, manufacturers, and governments to mitigate digital risks and enhance security.

24/7 Shift Pattern - 4 on 4 off, 12 hour shifts

Today, it is an unavoidable fact that your business-critical infrastructure and systems are at risk of attack. The key to good security is a clear understanding of what is most critical to the business. When you do not have enough internal resources, time, or skills to monitor and manage your IT environment 24/7, NCC Group can help, freeing up your skilled employees to focus on value-add activities.

NCC Group provides a range of managed and hosted services delivered from our Global Security Operations Centre (SOC), which operates 24/7, 365 days a year. Our team of over 100 accredited security experts is available around the clock, dealing daily with over 200 million log events and providing support for thousands of network devices.

NCC Group’s MXDR Team provides world-class Extended Detection and Response (XDR) services, detecting, responding to, and mitigating cyber-attacks on our customers' networks in our Security Operations Centres. We use a plethora of detection tools such as the Microsoft Security Stack, Splunk, EDR, IDS & IPS tools, and many more, all integrated with NCC Group's Unified Cyber Platform (UCP).

The MXDR Team is looking for L2 SOC Analysts with a passion for security to join the team, helping customers get the most out of our services and protect their networks. This is an opportunity to join a technically advanced and talented team and help NCC Group build and deliver world-class services to our customers.

This role is ideal for a seasoned SOC Analyst with experience in cybersecurity looking to broaden their scope of cyber skills with a strong focus on detection and response to cyber incidents.

Key Responsibilities

  • Monitor global systems for potential threats, vulnerabilities, and indicators of compromise.
  • Perform in-depth analysis of security alerts utilising both NCC Group's UCP and explore further using the underlying detection platform where necessary.
  • Provide incident remediation and prevention documentation and recommendations to customers based on defined procedures and analyst experience.
  • Document and adhere to processes related to security monitoring procedures.
  • Provide customer service that always exceeds our customers’ expectations.
  • Initiate escalation procedures to counteract potential threats, vulnerabilities, and threat actors.
  • Compile and review service-focused reports.
  • Act as an escalation point for junior team members, aiding and mentoring where necessary.
  • Contribute to the continuous improvement of SOC procedures and documentation.
  • Perform other SOC duties as assigned.

Skills, Knowledge & Expertise

Core Technical Skills & Experience

  • Practical experience with security and networking tools such as Microsoft XDR (Sentinel, Defender) and Splunk Enterprise/Cloud/Enterprise Security
  • Strong understanding of network protocols, endpoint detection, and digital forensics
  • In-depth knowledge of Windows and Linux operating systems
  • Hands-on experience analysing common security incidents and supporting endpoint security
  • Ability to remain calm and effective during high-pressure and sensitive security situations

Desirable Certifications

Not mandatory, but a strong advantage if held or equivalent knowledge demonstrated.

  • Microsoft: SC-200, AZ-500, AZ-900, MS-500
  • Splunk: Certified User, Power User, Advanced Power User, Enterprise Security Administrator
  • CrowdStrike: CCFR, CCFH
  • CREST: CPSA, CRIA, CMRE, CNIA, CHIA
  • CompTIA: Security+, Network+, CySA+
  • Cisco: CCNA
  • SANS: GCIA, GCIH, GSEC
  • Other relevant certifications

Job Benefits

  • Flexible Working: Balance your work and personal life with our flexible working options.
  • Generous Holiday Allowance: Enjoy 25 days of holiday, plus bank holidays, with the option to buy up to 5 additional days of annual leave differs for SOC shift workers, please speak to your TA partner for more information).
  • Medicash & Critical Illness Scheme
  • Financial & Investment Benefits: Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme.
  • Community & Volunteering Programmes: Make a difference in your community with our volunteering opportunities.
  • Green Car Scheme: Drive green and save money with our eco-friendly car scheme.
  • Cycle Schem e: Stay fit and healthy with our cycle-to-work scheme.
  • Special Time Off: Take time off for those big moments in life, like getting married/entering into a civil partnership, becoming a grandparent, and welcoming home a new pet.
  • Family Planning: Benefit from our generous maternity and paternity leave, as well as time off and support for those undergoing fertility treatments.
Free account
Stop reading job ads. Get the ones that fit.
One free account turns this page into a shortlist built around your stack, your level and your pay.
Match on every job. Stack, seniority, pay and location, scored against your profile.
1,964,179 open roles. Read straight off company career pages, refreshed every day.
Unlimited applications. Every one you send is tracked in one place, on-site or on a company board.
3 tailored CVs a month. Rewritten for the exact job you are applying to. Included free.
Create a free account Continue with Google
Free forever. No card. Under a minute.

Your match

How well do you fit this role?
Two answers are enough for a real match. No account needed.
Check my fit
Answers stay in this browser until you create an account.

Recommended for you based on this role

Security
Similar stack
Same company
Manchester
$135k – $145k per year • Hybrid • 7+ years exp • Sacramento
Apply
Remote (United Arab Emirates) • Full-Time • Dubai
Apply
≈ $104k – $200k per year (Estimated) • In office • Full-Time • 5+ years exp • Bachelor's Degree • Houston
DevOps
Azure
Cybersecurity
Microsoft Defender
NIST CSF
HIPAA
Zero Trust
Microsoft Defender for Cloud
Microsoft Entra ID
SIEM
Apply
≈ $79k – $152k per year (Estimated) • In office • Full-Time • 3+ years exp • Bachelor's Degree • Houston
Cybersecurity
HIPAA
SIEM
Apply
$117k – $130k per year • In office • Full-Time • 4+ years exp • San Diego
DevOps
Linux
Windows
TCP/IP
DNS
Cybersecurity
Crowdstrike
Qualys Cloud Platform
Microsoft Defender
MITRE ATT&CK
CVE
Sophos
SIEM
Apply
$120k – $203k per year • Hybrid • Full-Time • 8+ years exp • Toronto
Python
Go
JavaScript
Ruby
Databases
Databricks
DevOps
Splunk
Terraform
Puppet
Ansible
GCP
AWS CDK
Chef
CloudFormation
Datadog
Prometheus
Pulumi
Azure
CI/CD
ArgoCD
Jenkins
AWS
Kubernetes
Grafana
Spinnaker
Linux
Apply
≈ $105k – $226k per year (Estimated) • In office • Full-Time • Perth
JavaScript
TypeScript
C#
AI/ML
LangGraph
AutoGen
LangChain
Claude
LlamaIndex
AI Agents
Semantic Kernel
RAG
Frontend
Next.js
Angular
React.js
DevOps
Rest API
Splunk
GitHub Actions
PagerDuty
Prometheus
CI/CD
AWS
Docker
Kubernetes
Grafana
SLI/SLO/SLA
AWS Step Functions
QA
JMeter
Postman
Apply
$94k – $179k per year • Hybrid • Full-Time • 4+ years exp • Bachelor's Degree • San Antonio
Python
Go
JavaScript
Kotlin
SQL
C++
COBOL
Objective-C
COBOL
CICS
JCL
Databases
Db2
IMS
DevOps
Splunk
OpenShift
New Relic
Datadog
Dynatrace
Azure
AWS
Docker
Kubernetes
Grafana
AppDynamics
Incident Management
Robotics
Path Planning
Management
Confluence
Jira
ServiceNow
ITIL
Apply
≈ $74k – $133k per year (Estimated) • In office • 5+ years exp • Bachelor's Degree • Toronto
JavaScript
Java
TypeScript
SQL
Node JS
Java
Spring Boot
Databases
PostgreSQL
Apache Kafka
Google BigQuery
Azure SQL Database
Frontend
Redux
Webpack
Next.js
React.js
DevOps
Splunk
Terraform
GCP
GitHub Actions
Dynatrace
Azure
CI/CD
Jenkins
Docker
Kubernetes
Bitbucket
Google Cloud Run
IAM
Cybersecurity
Fortify
Cryptography
Vault
Management
Agile
Apply
$140k – $260k per year • In office • Nationals only • 16+ years exp • Bachelor's Degree • Rochester
DevOps
Splunk
Azure DevOps
Azure
Cybersecurity
Least Privilege
Management
ServiceNow
ITIL
ITSM
Apply
Remote (location not specified) • Contractor
Python
PowerShell
DevOps
Linux
Windows
Cybersecurity
SentinelOne
Tanium
Apply
≈ $20k – $45k per year (Estimated) • In office • Full-Time • Manila
JavaScript
DevOps
GCP
Azure
Docker
GitHub
IAM
SOAP
Cybersecurity
Okta
CyberArk
Auth0
BeyondTrust
Delinea
Active Directory
Management
ServiceNow
ITSM
Apply
Detection Engineer 4 days ago
≈ $54k – $109k per year (Estimated) • Hybrid • Full-Time • Rijswijk
DevOps
Splunk
Azure
Windows
Cybersecurity
Microsoft Sentinel
STRIDE
Active Directory
SIEM
Apply
Senior IAM Engineer 4 days ago
≈ $120k – $213k per year (Estimated) • Remote (location not specified) • Full-Time • Manchester
JavaScript
DevOps
GCP
Azure
AWS
GitHub
IAM
SOAP
Cybersecurity
Okta
CyberArk
ISO 27001
Zero Trust
BeyondTrust
Delinea
Active Directory
Management
ServiceNow
Agile
Apply
SOC Analyst 4 days ago
≈ $40k – $83k per year (Estimated) • Hybrid • Contractor • 2+ years exp • Bachelor's Degree • Rijswijk
Apply
$65k – $100k per year • Hybrid • Full-Time • Bachelor's Degree • Manchester • Marlborough
Python
JavaScript
TypeScript
C#
Apex
AI/ML
Cursor
DevOps
Rest API
CI/CD
Git
GitLab
QA
Selenium
Cypress
Playwright
Jest
Pytest
MedTech
ISO 13485
21 CFR Part 11
EU MDR
Apply
≈ $38k – $85k per year (Estimated) • In office • Birmingham • Manchester • Leeds • London • Reading
Apply
Truck Driver 1 day ago
≈ $31k – $54k per year (Estimated) • In office • Full-Time • Manchester
Apply
$32k per year • In office • Full-Time • High School Diploma • Manchester
Apply
≈ $37k – $87k per year (Estimated) • In office • High School Diploma • Manchester
Cybersecurity
HIPAA
Apply
See all jobs
This is one of many
1,964,179 more open roles from verified company boards, updated every day.