{"id":510603,"url":"https://alion.io/job/ncc-group-soc-analyst-2","title":"SOC Analyst","company":{"id":43360,"name":"NCC Group","domain":"nccgroup.com","url":"https://alion.io/company/nccgroup","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Pinpoint","truth_index":{"grade":"A","score":100,"open_postings":3,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":14,"computed_at":"2026-10-25T05:49:26Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Manchester, United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":99000,"max_usd":225000,"period":"year","method":"role_country_seniority_unknown","sample_n":3385},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Linux","optional":false},{"name":"Splunk","optional":false},{"name":"Windows","optional":false},{"name":"Crowdstrike","optional":true}],"status":"live","first_seen_at":"2026-09-06T14:36:48Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-25T08:35:31Z","board_verified":true,"closed_at":null,"days_open":48,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":48},"description":"24/7 Shift Pattern - 4 on 4 off, 12 hour shifts\nToday, it is an unavoidable fact that your business-critical infrastructure and systems are at risk of attack. The key to good security is a clear understanding of what is most critical to the business. When you do not have enough internal resources, time, or skills to monitor and manage your IT environment 24/7, NCC Group can help, freeing up your skilled employees to focus on value-add activities.\nNCC Group provides a range of managed and hosted services delivered from our Global Security Operations Centre (SOC), which operates 24/7, 365 days a year. Our team of over 100 accredited security experts is available around the clock, dealing daily with over 200 million log events and providing support for thousands of network devices.\nNCC Group’s MXDR Team provides world-class Extended Detection and Response (XDR) services, detecting, responding to, and mitigating cyber-attacks on our customers' networks in our Security Operations Centres. We use a plethora of detection tools such as the Microsoft Security Stack, Splunk, EDR, IDS & IPS tools, and many more, all integrated with NCC Group's Unified Cyber Platform (UCP).\nThe MXDR Team is looking for L2 SOC Analysts with a passion for security to join the team, helping customers get the most out of our services and protect their networks. This is an opportunity to join a technically advanced and talented team and help NCC Group build and deliver world-class services to our customers.\nThis role is ideal for a seasoned SOC Analyst with experience in cybersecurity looking to broaden their scope of cyber skills with a strong focus on detection and response to cyber incidents.\nKey Responsibilities\nMonitor global systems for potential threats, vulnerabilities, and indicators of compromise.\nPerform in-depth analysis of security alerts utilising both NCC Group's UCP and explore further using the underlying detection platform where necessary.\nProvide incident remediation and prevention documentation and recommendations to customers based on defined procedures and analyst experience.\nDocument and adhere to processes related to security monitoring procedures.\nProvide customer service that always exceeds our customers’ expectations.\nInitiate escalation procedures to counteract potential threats, vulnerabilities, and threat actors.\nCompile and review service-focused reports.\nAct as an escalation point for junior team members, aiding and mentoring where necessary.\nContribute to the continuous improvement of SOC procedures and documentation.\nPerform other SOC duties as assigned.\nSkills, Knowledge & Expertise\n Core Technical Skills & Experience\nPractical experience with security and networking tools such as Microsoft XDR (Sentinel, Defender) and Splunk Enterprise/Cloud/Enterprise Security\nStrong understanding of network protocols, endpoint detection, and digital forensics\nIn-depth knowledge of Windows and Linux operating systems\nHands-on experience analysing common security incidents and supporting endpoint security\nAbility to remain calm and effective during high-pressure and sensitive security situations\nDesirable Certifications\nNot mandatory, but a strong advantage if held or equivalent knowledge demonstrated.\nMicrosoft: SC-200, AZ-500, AZ-900, MS-500\nSplunk: Certified User, Power User, Advanced Power User, Enterprise Security Administrator\nCrowdStrike: CCFR, CCFH\nCREST: CPSA, CRIA, CMRE, CNIA, CHIA\nCompTIA: Security+, Network+, CySA+\nCisco: CCNA\nSANS: GCIA, GCIH, GSEC\nOther relevant certifications\nJob Benefits\nFlexible Working: Balance your work and personal life with our flexible working options.\nGenerous Holiday Allowance: Enjoy 25 days of holiday, plus bank holidays, with the option to buy up to 5 additional days of annual leave differs for SOC shift workers, please speak to your TA partner for more information). \nMedicash & Critical Illness Scheme\nFinancial & Investment Benefits: Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme.\nCommunity & Volunteering Programmes: Make a difference in your community with our volunteering opportunities.\nGreen Car Scheme: Drive green and save money with our eco-friendly car scheme.\nCycle Schem e: Stay fit and healthy with our cycle-to-work scheme.\nSpecial Time Off: Take time off for those big moments in life, like getting married/entering into a civil partnership, becoming a grandparent, and welcoming home a new pet.\n Family Planning: Benefit from our generous maternity and paternity leave, as well as time off and support for those undergoing fertility treatments.","description_format":"text","description_chars":4590,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Annual leave","Flexible schedule"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Penetration Testing","Information Security","Managed Security"],"lifecycle":[{"event":"open","at":"2026-09-07T14:36:48Z"},{"event":"close","at":"2026-09-08T11:37:12Z"},{"event":"reopen","at":"2026-09-08T17:37:22Z"},{"event":"close","at":"2026-09-14T15:11:34Z"},{"event":"reopen","at":"2026-09-23T10:10:25Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 4 · green card filings: 1","filings_12m":4,"filings_prev_12m":6,"green_card_filings_12m":1,"median_offered_wage_usd":120500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":3}],"liveness":{"score":21,"band":"cold","label":"Long shot","p_open":1,"p_active":0.594,"p_room":0.35,"age_days":48,"expected_fill_days":14,"reasons":["conf:1","wave","velocity","win:tail"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/ncc-group-soc-analyst-2","json_url":"https://alion.io/job/ncc-group-soc-analyst-2.json","meta":{"generated_at":"2026-10-25T09:29:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13609,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":43360},"rest":"https://alion.io/mcp/rest/get_company?id=43360"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fncc-group-soc-analyst-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fncc-group-soc-analyst-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fncc-group-soc-analyst-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ncc-group-soc-analyst-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fncc-group-soc-analyst-2"}]}