SOC L1 Analyst

TCS is consistently voted a Top Employer in the UK and globally. Our competitive salary packages feature pension, health care, life assurance, laptop and access to extensive training resources and discounts within the larger Tata network.

We offer health & wellness initiatives and sports events; we are the proud sponsor of the London Marathon and partner with our local communities in Ireland.

As a SOC Level 1 Analyst, you will be responsible for monitoring security alerts, performing initial triage, and identifying potential cybersecurity incidents across customer environments. You will follow established procedures to validate alerts, gather relevant evidence, and escalate confirmed or complex incidents to L2 analysts.

You will use SIEM, EDR, email, identity, cloud, and security monitoring technologies to review events and support the timely detection of suspicious activity. Working closely with L2 analysts and wider security teams, you will help maintain effective 24x7 monitoring and accurate incident records.

This role requires attention to detail, a strong interest in cybersecurity, clear communication skills, and the ability to work effectively within a 24x7 Security Operations Centre.

Your responsibilities:

• Monitor security alerts and events using SIEM, EDR, and other security monitoring platforms.
• Perform initial alert triage, validate indicators, and distinguish genuine security concerns from false positives.
• Gather relevant logs, evidence, and contextual information to support incident investigation.
• Create and update incident tickets with clear, accurate, and timely investigation notes.
• Escalate confirmed, high-risk, or complex incidents to L2 analysts in line with defined procedures and SLAs.
• Follow documented playbooks and standard operating procedures for common security alert types.
• Support basic investigation of endpoint, identity, email, network, and cloud security alerts.
• Communicate clearly with SOC colleagues, service teams, and stakeholders during incident handling.
• Contribute to shift handovers, operational reporting, knowledge articles, and continuous improvement activities.
• Maintain awareness of current cyber threats, attack techniques, and indicators of compromise.

If you need support in completing the application or if you require a different format of this document, please get in touch with at UKI.recruitment@tcs.com with the subject line: "Application Support Request".

Careers at TCS: It means more

TCS is a purpose-led transformation company, built on belief. We do not just help businesses to transform through technology. We support them in making a meaningful difference to the people and communities they serve - our clients include some of the biggest brands in the UK and worldwide. For you, it means more to make an impact that matters, through challenging projects which demand ambitious innovation and thought leadership.

• Gain access to endless learning opportunities.
• Fast track your growth with diverse career opportunities internally.
• Grow your career, while being exposed to new technologies.

This is to notify you that TCS does not ask for any sort of payment or security deposit from candidates at any stage of the recruitment process. The firm never sends out job offers from free internet email services like Gmail, Yahoo Mail, and so on. TCS has not authorised any third-party company to collect money on their behalf. As a vigilant job seeker, beware of fraudulent recruitment activity and protect your interests! You can write to UKI.recruitment@tcs.com to report any fraudulent activity.

Due to the high volume of applications, we will be unable to contact each applicant individually on the status of their application. If you have not received a direct response within 30 days, then it should be deemed unsuccessful on this occasion.

Join us and do more of what matters. Apply online now.