SOC Analyst

Motorway is the UK's largest online car-selling platform. We connect private sellers directly with over 8,000 dealers nationwide. Our online platform helps sellers achieve great prices for their cars while giving dealers fast, reliable access to the stock they want for their dealerships. Founded in 2017, our award-winning, technology-led approach has redefined the experience of selling a car. Motorway is backed by some of the world’s leading technology investors, having raised £143 million in Series C funding.

This is a unique opportunity to join a fast-growing scale-up at a crucial phase of growth and help change an industry for the better.

We are looking for a motivated Cyber Security Analyst to join our Security team and support the day-to-day protection of our systems, users and cloud environments.

This is a hands-on role suited to someone with existing cyber security experience who is looking to further develop their skills across Security Operations, incident response, vulnerability management and cloud security.

You will take ownership of routine security investigations, work closely with technical teams to resolve security issues and escalate more complex incidents to senior members of the Security team.

• Monitor, triage and investigate security alerts and incidents across SIEM, EDR,CrowdStrike and other security platforms.

• Investigate suspicious endpoint, email, identity and cloud activity and support incident response activities.

• Analyse security logs and indicators of compromise to identify potential threats..

• Support vulnerability management, remediation tracking and security improvement activities.

• Maintain clear investigation records, security tickets, runbooks and operational documentation.

• Collaborate with Security, IT, Engineering and Cloud teams to investigate and resolve security issues.

• 1-3 years of experience within Cyber Security, Security Operations, SOC or a similar technical security environment.

• Hands-on experience with cyber security technologies such as SIEM, EDR/XDR, vulnerability management or cloud security tools.

• Good understanding of security alert triage, incident investigation and common cyber threats.

• Understanding of networking fundamentals, Windows/Linux environments and cloud platforms such as AWS, Azure or GCP.

• Strong analytical and troubleshooting skills with the ability to clearly communicate and document investigation findings.

• Ability to independently manage routine security investigations while recognising when escalation is required.

• Experience with technologies such as CrowdStrike Falcon, Microsoft Defender, Google Chronicle, Microsoft Sentinel or Splunk.

• Familiarity with MITRE ATT&CK and Indicators of Compromise (IoCs).

• Exposure to vulnerability management, cloud security or security automation/SOAR.

• Basic experience with KQL, PowerShell, Python or similar query/scripting technologies.

• Relevant cyber security certifications such as CompTIA Security+, CySA+ or equivalent.