About the job

At Cyborts, our cybersecurity experts are at the heart of everything we do. We thrive in a fast-paced, dynamic environment where innovation, hands-on problem-solving, and cutting-edge technology drive our mission. Whether it’s building new tools, developing real-world training labs, or delivering threat detection services — our team is focused on staying ahead in the ever-evolving world of cybersecurity.

We operate in a collaborative, flat-structured culture that empowers everyone to take initiative and make impactful decisions, regardless of role. Innovation and teamwork aren’t just encouraged — they’re expected. You’ll always find support across teams, and we move forward together, as one unit.

About The Role

To support our growth, we are looking for SOC Analysts to join our growing cyber security function. This role will be supporting our 24/7 operational capabilities (On-call rota, not shift based).

As a member of the Starling SOC team, you will be working with the industries brightest SecOps professionals to protect Starling customers, assets, and systems using the latest technologies.

Incident Triage, Response, and Investigations based on Alerts received from multiple sources which include:

• Cloud Infrastructure/Security
• Endpoint Detection and Response
• Perimeter detection tooling
  

Investigating and responding to security alerts raised by Users.

Enhancing and creating analytic triggers to enhance alert efficacy.

Continuous development of incident handling and readiness processes.

Proactive threat hunting based on threat intelligence.

Documentation of incidents and investigations.

Requirements

About your Skills

We’re open-minded when it comes to hiring and we care more about aptitude and attitude than specific experience or qualifications. Below is an overview:

• 3+ years experience in an in-house SOC role and team
• Understanding of AWS Security Solutions (or other Public Cloud Solutions)
• Analysis and Incident Response experience with Cloud systems such as AWS or GCP
• Experience working and supporting analytics/SIEM platforms
• Experience working in CSIRT/SOC functions
• Experience supporting and conducting Incident Response engagements
• Experience in endpoint based investigations
• Experience in cloud based investigations
• Experience with Incident Command and conducting Tabletop Exercises
• Interest in Automation
• Interest in Threat Intelligence and Analytic Tuning
• A high level understanding of mobile, network and operating system security controls
• Any experience of programming in Python, Go and/or Java
• A Cyber/Information Security related degree and/or relevant cyber security qualification(s) would be desired but not required
  
  

Interview Process

Our interviews are conversational and we want to get the best from you, so come with questions and be curious. In general you can expect the below video interviews, following a chat with one of our Talent Team:

• First Interview: 45 minutes
• Technical Interview: 90 minutes
• Final Interview: 30 minutes
  
  

Benefits

• 25 days holiday (plus take your public holiday allowance whenever works best for you)
• An extra day’s holiday for your birthday
• Annual leave is increased with length of service, and you can choose to buy or sell up to five extra days off
• 16 hours paid volunteering time a year
• Salary sacrifice, company enhanced pension scheme
• Life insurance at 4x your salary & group income protection
• Private Medical Insurance with VitalityHealth including mental health support and cancer care. Partner benefits include discounts with Waitrose, Mr&Mrs Smith and Peloton
• Generous family-friendly policies
• Perkbox membership giving access to retail discounts, a wellness platform for physical and mental health, and weekly free and boosted perks
• Access to initiatives like Cycle to Work, Salary Sacrificed Gym partnerships and Electric Vehicle (EV) leasing