{"id":2671449,"url":"https://alion.io/job/ntt-data-soc-analyst-level-1","title":"SOC Analyst Level 1","company":{"id":50348,"name":"NTT DATA","domain":"nttdata.com","url":"https://alion.io/company/ntt-data","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Phenom","truth_index":{"grade":"A","score":95,"open_postings":105,"ghost_share":0,"stale_share":0.371,"repost_share":0.019,"time_to_fill_p50_days":17,"computed_at":"2026-10-28T05:59:10Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Birmingham, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":39000,"max_usd":75000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":10},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Incident Management","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"TCP/IP","optional":false},{"name":"Windows","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"Microsoft Office","optional":true}],"status":"live","first_seen_at":"2026-09-18T00:00:00Z","employer_posted_date":"2026-09-18","last_verified_at":"2026-10-28T07:53:24Z","board_verified":true,"closed_at":null,"days_open":40,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":40},"description":"The team you'll be working with:\nUK Sovereign SOC\nSecurity Analyst (Level 1)\nRole Description\nThe SOC Analyst is a frontline, shift-based role operating within a 24/7 Security Operations Centre. The role is responsible for monitoring, triaging, analysing, and investigating security alerts and events using SIEM and SOAR platforms to detect potential security incidents and protect monitored environments.\nWorking within defined procedures, runbooks, and escalation paths, the SOC Analyst performs initial investigations, validates alerts, and supports incident response activities. The role requires strong attention to detail, disciplined execution, and the ability to work effectively in a high-volume, operational environment.\nWhat you'll be doing:\nYou will continuously monitor security alerts, logs, and event data across customer and internal environments, identifying suspicious or malicious activity. You will triage and analyse alerts to determine whether they represent potential security or service incidents, and prioritise them in line with defined security incident management policies.\nYou will conduct first-line investigations using SIEM, SOAR, and supporting security tools, validating alerts, gathering relevant evidence, and assessing initial impact and severity. Where indicators of compromise or attack activity are identified, you will recognise successful or unsuccessful attack attempts and escalate appropriately to senior analysts or incident responders with clear and accurate context.\nYou will support incident containment and remediation activities by following runbooks and customer guidance, ensuring actions are documented and carried out consistently. High-quality case management is a core responsibility: you will create and maintain incident tickets, record investigation steps and findings, and produce clear incident summaries and investigation notes using internal knowledge bases and research.\nYou will contribute to post-incident reviews by sharing findings and identifying opportunities to improve detection, response, or operational processes. You will also apply threat intelligence provided by the SOC to support alert analysis and investigations.\nOperational discipline is essential. You will follow defined SOC procedures, documentation standards, and shift-handover processes, ensuring continuity across shifts. You will participate fully in the 24/7 shift rota, working collaboratively with other analysts to maintain consistent monitoring coverage.\nWhat experience you'll bring:\nYou will have a foundational understanding of cyber security concepts, including TCP/IP networking, common log sources, and basic attack techniques. You will be comfortable working with a SIEM platform such as Splunk, Microsoft Sentinel, or an equivalent tool, and have basic knowledge of common operating systems including Windows, Linux, and macOS.\nYou will demonstrate strong analytical and problem-solving skills, with the ability to assess alerts, follow investigative processes, and make sound decisions within defined procedures. Clear written and verbal communication skills are essential, particularly for accurate ticketing, escalation, and shift handover.\nYou will be able to work calmly and effectively in a shift-based operational environment, managing workload and maintaining focus during periods of high alert volume. You will be comfortable following procedures, working with minimal supervision, and continuously learning from feedback and operational experience. Awareness of scripting, query languages, or rule-based detection is advantageous but not required.\nExperience & Qualifications\nExperience or strong interest in cyber security or IT operations\nEntry-level or foundation cyber security certifications desirable (CySA+, SC-200)\nExperience with cloud platforms such as Microsoft Azure and/or AWS is desirable\nProficiency with Microsoft Office tools, particularly Excel and Word\nSecurity & Working Requirements\nEligibility for, or holding, UK SC Clearance\nWillingness to work within a 24/7 shift-based SOC environment\nWho we are:\nAt NTT DATA, you have endless opportunities to think big, act bold and take ownership. As a $30+ billion business and technology services, AI and digital infrastructure leader, we co-innovate solutions with clients and partners globally for business and societal impact. Serving 75% of the Fortune Global 100, with experts in over 70 countries, we encourage experimentation and recognize great work. Proudly a Global Top Employer, NTT DATA is part of NTT Group, which invests over $3 billion annually in R&D. Make this the place where you belong, learn, and build your network. Make this the place where you grow.\nwhat we'll offer you:\nWe offer a range of tailored benefits that support your physical, emotional, and financial wellbeing. Our Learning and Development team ensure that there are continuous growth and development opportunities for our people. We also offer the opportunity to have flexible work options.\nYou can find more information about NTT DATA UK & Ireland here: https://uk.nttdata.com/\nWe are an equal opportunities employer. We believe in the fair treatment of all our employees and commit to promoting equity and diversity in our employment practices. We are also a proud Disability Confident Committed Employer - we are committed to creating a diverse and inclusive workforce. We actively collaborate with individuals who have disabilities and long-term health conditions which have an effect on their ability to do normal daily activities, ensuring that barriers are eliminated when it comes to employment opportunities. In line with our commitment, we guarantee an interview to applicants who declare to us, during the application process, that they have a disability and meet the minimum requirements for the role. If you require any reasonable adjustments during the recruitment process, please let us know. Join us in building a truly diverse and empowered team.\nBack to search\nEmail to a friend\nApply now","description_format":"text","description_chars":6021,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible schedule"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Cybersecurity","Health Care","Data Centers & Colocation"],"lifecycle":[{"event":"open","at":"2026-10-16T04:13:07Z"},{"event":"close","at":"2026-10-16T04:25:42Z"},{"event":"reopen","at":"2026-10-16T09:31:40Z"},{"event":"close","at":"2026-10-16T09:39:49Z"},{"event":"reopen","at":"2026-10-16T18:19:10Z"},{"event":"close","at":"2026-10-17T12:55:39Z"},{"event":"reopen","at":"2026-10-17T16:06:38Z"},{"event":"close","at":"2026-10-17T22:44:14Z"},{"event":"reopen","at":"2026-10-18T02:04:15Z"},{"event":"close","at":"2026-10-18T05:18:56Z"},{"event":"reopen","at":"2026-10-18T08:43:18Z"},{"event":"close","at":"2026-10-18T12:14:29Z"},{"event":"reopen","at":"2026-10-18T15:32:36Z"},{"event":"close","at":"2026-10-18T22:03:11Z"},{"event":"reopen","at":"2026-10-19T01:24:23Z"},{"event":"close","at":"2026-10-19T04:44:38Z"},{"event":"reopen","at":"2026-10-19T08:43:28Z"},{"event":"close","at":"2026-10-20T13:41:21Z"},{"event":"reopen","at":"2026-10-20T17:46:26Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Skilled Worker, Senior or Specialist Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Skilled Worker; Global Business Mobility: Senior or Specialist Worker","cap_exempt":false,"checked_at":"2026-10-28T06:26:45+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":10,"band":"cold","label":"Long shot","p_open":1,"p_active":0.349,"p_room":0.28,"age_days":40,"expected_fill_days":17,"reasons":["conf:3","velocity","win:tail","crowd:junior,brand"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/ntt-data-soc-analyst-level-1","json_url":"https://alion.io/job/ntt-data-soc-analyst-level-1.json","meta":{"generated_at":"2026-10-28T11:31:21Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15124,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":50348},"rest":"https://alion.io/mcp/rest/get_company?id=50348"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fntt-data-soc-analyst-level-1"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fntt-data-soc-analyst-level-1"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fntt-data-soc-analyst-level-1"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ntt-data-soc-analyst-level-1\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fntt-data-soc-analyst-level-1"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2671449}},{"tool":"search_jobs","arguments":{"company":"nttdata.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2671449},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}