The Security Operations Centre (SOC) Graduate Trainee role is a hands-on information security position, working in a security sensitive, hybrid cloud environment. It requires configuring and using security tools, performing day-to-day security operations, maintaining documentation, and working with internal and external parties.
Strong candidates bring an understanding of common technical security controls and how they are applied to ensure the ongoing security of critical assets in a 24/7 environment.
What you’ll be responsible for in this role:
•Monitor, investigate, triage, and respond to security alerts and incidents generated by security monitoring platforms.
•Administer and maintain security technologies, including Endpoint Detection and Response (EDR), Security Information and Event Management (SIEM), and vulnerability scanning solutions.
•Conduct routine security log reviews across production, disaster recovery, development, cloud, and corporate environments.
•Perform security event analysis to identify suspicious activity, indicators of compromise, and emerging threats.
•Support vulnerability management activities, including vulnerability assessment, risk analysis, remediation tracking, and reporting.
•Perform security compliance reviews of critical infrastructure, including user access management, privileged account management, patching, firewall configurations, endpoint security controls, and system hardening standards.
•Support incident response and investigation activities, including evidence collection, documentation, escalation, and lessons learned reviews.
•Deliver security awareness and operational security training to employees where appropriate.
•Participate in an on-call, shift, and weekend support rota to ensure continuous security monitoring and response capabilities.
What experiences and skills are necessary to be successful in this role:
Mandatory
•0-2 years of experience with a primary focus in Information Security
•Formal security certification, or working towards certification
•Good understanding of security controls
•Knowledge of security capabilities available in Linux, Windows, and AWS Cloud Computing environments
•Good understanding of network security tools such as firewalls and NIDS
