[Skip to main content](#main-content)

[OpenNash Jobs](https://jobs.opennash.com/)
[Hiring report](/reports/hiring/) · [All IBM jobs](https://jobs.opennash.com/companies/ibm/) · [Search jobs](/search/)

IBM · Hursley, GBR

# SOC Analyst (24/7 Shift) - Public Sector

Hursley, GBR 

Listed on IBM’s official careers site. Posted September 17, 2026. Check that it is still open and apply there.
[Apply on IBM’s careers site →](https://ibm.dejobs.org/jobs/8946097398AA4575800DC406AD020CD5/)

[OpenNash Jobs](https://jobs.opennash.com/) / [IBM](https://jobs.opennash.com/companies/ibm/) / SOC Analyst (24/7 Shift) - Public Sector

## Job description

### Introduction

At IBM CIC, we provide technical and industry expertise to a wide range of public and private sector clients in the UK. A career in IBM CIC means you’ll have the opportunity to work with leading professionals across multiple industries to improve the hybrid cloud and AI journey for the most innovative and valuable companies in the world. You will get the chance to deliver effective solutions, driving meaningful business change for our clients, using some of the latest technology platforms.

Curiosity and a constant quest for knowledge serve as the foundation to success here. You’ll be encouraged and supported to constantly reinvent yourself, focusing on skills in demand in an ever changing market. You’ll be working with diverse teams, coming up with creative solutions which impact a wide network of clients, who may be at their site or one of our CIC or IBM locations. Our culture of evolution centres on long-term career growth and development opportunities in an environment that embraces your unique skills and experience.

### Your role and responsibilities

As a Technical Consultant specialising in Threat Detection, Response & Intelligence, you will support and lead the monitoring, detection, and initial response to cyber security threats within a 24×7 SOC consulting environment. You will play a key role in maintaining operational excellence on shift, supporting incident investigation, and ensuring consistent delivery of high-quality security operations across client environments.

Working across SIEM platforms, security tooling, and incident response workflows, you will help ensure threats are identified, triaged, and escalated effectively, while contributing to the continuous improvement of SOC processes and capabilities. This is a hands-on operational role with responsibility for incident leadership, team support, and quality assurance, alongside exposure to client environments and senior stakeholders.

### Key Responsibilities
- Monitor, triage, and investigate security alerts and incidents across a range of SIEM and security platforms
- Lead or support incident response activities, including:
- Initial investigation
- Containment coordination
- Escalation to relevant teams
- Act as a senior presence on shift, supporting Tier 1/2 analysts and ensuring smooth SOC operations
- Drive incident quality and consistency, ensuring playbooks and procedures are followed
- Support major incident initiation and coordination, including communication across technical and non-technical stakeholders
- Analyse security events and identify
- Patterns
- Threat behaviours
- Opportunities for improvement
- Contribute to playbook development and refinement, improving SOC efficiency and response capability
- Work with detection and engineering teams to
- Improve alert quality
- Reduce false positives
- Support operational effectiveness
- Produce clear and structured incident reports and handovers
- Participate in shift handovers, retrospectives, and continuous improvement activities
- Support client interactions where required, providing updates and operational insights Required technical and professional expertise
- Proven experience working in a SOC environment (L2 / L3 level) within a 24×7 operational setting
- Strong experience with SIEM platforms, such as
- Microsoft Sentinel, QRadar, Splunk, Elastic or similar
- Practical experience in
- Incident triage and investigation
- Security event analysis
- Alert validation and escalation
- Understanding of:
- Incident response processes and workflows
- Threat detection methodologies
- Exposure to security tooling, such as - EDR/XDR platforms
- Network security technologies
- Identity and access systems
- Ability to interpret logs and identify suspicious behaviour across:
- Endpoints
- Networks
- Cloud environments
- Strong communication skills, with the ability to clearly articulate incidents and risks
- Experience working in client-facing or service-based environments

This role is subject to pre-employment screening in line with the UK Government’s Baseline Personnel Security Standard (BPSS). An additional range of Personal Security Controls referred to as National Security Vetting (NVS) may apply, this could include meeting the eligibility requirements for The Security Check (SC) or Developed Vetting (DV). Preferred technical and professional experience
- Experience as an Analyst and/or acting as a shift lead or senior escalation point within a SOC
- Exposure to threat hunting or detection improvement activities
- Experience working with - MITRE ATT&CK - Threat intelligence integration
- Familiarity with SOAR platforms and automated response workflows
- Relevant certifications such as: - SC-200 - GCIH / GIAC - Vendor SIEM certifications
- Experience working in regulated or public sector environments
- Understanding of SOC performance metrics and continuous improvement approaches
- Active UK Security Clearance IBM is committed to creating a diverse environment and is proud to be an equal-opportunity employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, caste, genetics, pregnancy, disability, neurodivergence, age, veteran status, or other characteristics. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.

## At a glance
- Posted by the employer: Sep 17, 2026
- First seen by OpenNash: Oct 19, 2026
- Last checked: Oct 19, 2026
- Listed for: 32 days
- Location: Hursley, GBR[Apply on IBM’s careers site →](https://ibm.dejobs.org/jobs/8946097398AA4575800DC406AD020CD5/)

## More jobs at IBM

### [AWS Cloud Architect - eSC or eDV Clearance Required](https://jobs.opennash.com/companies/ibm/jobs/bc4722eeab5843db4efb/)

Hursley, GBR

### [Agile Delivery Manager / Scrum Master (Public Sector)](https://jobs.opennash.com/companies/ibm/jobs/79a5a6300cec5c5dba8d/)

Hursley, GBR

### [Lead Azure Cloud Architect - SC Clearance](https://jobs.opennash.com/companies/ibm/jobs/d5972ffc826abc87e877/)

Hursley, GBR

### [AWS Data Scientist - Public Sector](https://jobs.opennash.com/companies/ibm/jobs/a7edfb307023e5e992c0/)

Hursley, GBR

### [Application Architect – Digital Engineering (Teamcenter)](https://jobs.opennash.com/companies/ibm/jobs/8296b03c584f3f6f2e03/)

Hursley, GBR

## Similar jobs at other companies

### [Senior SOC Analyst/SOC Lead](https://jobs.opennash.com/companies/ntt/jobs/3b3674e9bb934da8fb6f/)

NTT · Hyderabad, Telangāna, India

### [Junior SOC Analyst](https://jobs.opennash.com/companies/ntt/jobs/a8a0c8275f5ea4d37869/)

NTT · Milan, Italy

### [senior security operation center soc analyst l2](https://jobs.opennash.com/companies/richemont/jobs/e515c779c6770242b775/)

Richemont 

### [Public Area Attendant (Shift: 10:00 AM - 6:30 PM)](https://jobs.opennash.com/companies/loews/jobs/cc0cbd96febddb6a9a82/)

Loews · Nashville - Loews Vanderbilt Hotel, TN

### [2027 Global Corporate Banking Analyst Program - Public Sector - Summer Internship - London](https://jobs.opennash.com/companies/jpmorganchase/jobs/3a3f8a6aa8456655f3c8/)

JPMorganChase · LONDON, United Kingdom

OpenNash lists jobs from employers’ own careers sites and does not handle applications.
Dates come from the employer where stated; “first seen” and “last checked” are our own observations.

OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)