Security Operator I

The Role

This position sits within a Cyber Defense team and centres on conducting in-depth digital forensic investigations and incident response. Day to day, the analyst acquires and preserves forensic evidence, reconstructs attack timelines, analyses artefacts across endpoints, servers, network traffic, and cloud platforms, and supports the SOC during complex, high-severity incidents.

Skills & Experience

Candidates need hands-on experience in digital forensics and incident response, covering areas such as endpoint and network forensics, chain-of-custody procedures, and cloud platform investigations. Familiarity with forensic acquisition tools and methodologies, alongside experience in root cause and attack path analysis, is expected for this level of role.

Who It Suits

This role suits an analytical and detail-oriented professional who thrives under pressure and enjoys working through complex security incidents methodically. Someone comfortable operating within a structured SOC environment, collaborating across security teams, and maintaining rigorous evidential standards will find this position a strong fit.