Security Specialist (SOC & IR)

Reference: nvky5zsno662v96iz0ce

We are seeking a Security Specialist (SOC & IR) to help protect critical systems, applications and data against evolving cyber threats. In this role, you will monitor and investigate security events, coordinate incident response activities and support the continuous improvement of detection and response capabilities. You will work closely with infrastructure, application, identity and risk teams to identify vulnerabilities, reduce exposure and strengthen the organisation’s overall security posture.

Your responsibilities will include triaging alerts from SIEM, EDR, email security, cloud and network monitoring platforms; investigating suspicious activity; performing threat hunting; and escalating confirmed incidents in line with established procedures. You will assist with containment, eradication and recovery activities, maintain accurate incident records, and contribute to post-incident reviews and lessons learned. You will also develop and refine detection rules, playbooks and response procedures, support vulnerability and threat intelligence activities, and prepare clear technical reports for both technical and non-technical stakeholders. Participation in an on-call or out-of-hours incident response rota may be required.

The successful candidate will have practical experience in a security operations centre, incident response or a similar cybersecurity environment, with a sound understanding of network, endpoint, identity and cloud security concepts. Experience with SIEM, EDR, vulnerability management and security orchestration tools is desirable, as is the ability to analyse logs, investigate indicators of compromise and use scripting or automation to improve operational efficiency. Relevant certifications such as Security+, CySA+, GCIH, GCIA or equivalent experience are advantageous. You should be analytical, methodical and calm under pressure, with strong written and verbal communication skills and a commitment to continuous learning, confidentiality and professional security practice.

COMPETITIVE SALARY
Added 05/10/2026
Reference: nvky5zsno662v96iz0ce

Other similar jobs

Security Analyst

Added 24/08/2026

We are seeking a highly motivated Security Analyst to join our dynamic team. In this role, you will be responsible for monitoring, analyzing, and responding to security incidents to protect organizational assets and data. Key duties include conducting regular security assessments, analyzing threat intelligence, and implementing robust security measures. You will work closely with IT teams to identify vulnerabilities, recommend solutions, and ensure compliance with security policies and industry regulations. The Security Analyst will utilize a variety of security tools to detect, investigate, and remediate potential threats. Daily responsibilities include monitoring security alerts, investigating suspicious activities, and preparing detailed incident...

Learn more

Cyber SOC Specialist - ESN

Added 21/09/2026

We are seeking a Cyber SOC Specialist to join a security operations team responsible for monitoring, investigating and responding to cyber threats across a complex technology environment. In this role, you will help protect critical systems, applications and data by identifying suspicious activity, assessing security alerts and coordinating timely responses to incidents. Your responsibilities will include monitoring security information and event management (SIEM) platforms, endpoint detection and response tools, network security solutions and other monitoring technologies. You will triage alerts, investigate potential compromises, analyse logs and security events, and determine the scope and impact of incidents. You will also support...

Learn more

SOC Specialist

Added 25/08/2026

We are seeking a SOC Specialist to join a security operations team responsible for protecting critical systems, networks and data from evolving cyber threats. This role will involve monitoring security alerts, investigating suspicious activity and supporting the timely detection, analysis and response to incidents. You will work with security technologies including SIEM, endpoint detection and response, vulnerability management and network monitoring tools, using your technical judgement to distinguish genuine threats from false positives. Key responsibilities will include triaging and analysing alerts, carrying out threat hunting and investigating indicators of compromise across endpoints, applications and infrastructure. You will support incident response...

Learn more

SOC Specialist

Added 25/08/2026

We are seeking a SOC Specialist to support the monitoring, detection and response activities of a busy Security Operations Centre. In this role, you will help protect critical systems, applications and data by investigating security alerts, identifying suspicious activity and supporting the timely resolution of incidents. You will work closely with colleagues across infrastructure, networks, applications and risk to strengthen security controls and reduce organisational exposure. Your responsibilities will include monitoring SIEM, endpoint detection, network security and vulnerability management tools; triaging and investigating alerts; analysing logs and other sources of security telemetry; and escalating confirmed or high-risk incidents in line...

Learn more

Security Operations Centre (SOC) Operator

Added 24/09/2026

We are seeking a vigilant and technically capable Security Operations Centre (SOC) Operator to monitor, assess and respond to security events across a diverse technology environment. Working as part of a collaborative security team, you will help protect critical systems, applications and data by identifying suspicious activity and supporting timely, effective incident response. This role requires strong attention to detail, sound judgement and the ability to remain calm and methodical in a fast-paced operational setting. Your responsibilities will include monitoring security alerts and dashboards, reviewing and analysing event logs, triaging potential incidents, and escalating issues in line with established procedures....

Learn more

Cyber Security SOC Level 1 Analyst

Added 22/09/2026

We are seeking a Cyber Security SOC Level 1 Analyst to join a security operations team responsible for monitoring, detecting and responding to cyber threats across a diverse technology environment. This is an excellent opportunity for an early-career security professional to develop practical experience in security monitoring, incident handling and threat analysis while working alongside experienced analysts and technical specialists. In this role, you will monitor security alerts and events using SIEM, endpoint detection and response, network monitoring and other security tools. You will investigate suspicious activity, validate potential incidents, assess severity and escalate confirmed or complex threats in line...

Learn more

SOC Security Architect

Added 22/09/2026

We are seeking an experienced SOC Security Architect to design, develop and continuously improve the security architecture supporting a modern Security Operations Centre. In this role, you will define scalable capabilities for threat detection, monitoring, incident response and security analytics across cloud, on-premises and hybrid environments. You will translate business and cyber-risk requirements into practical technical solutions, establish architectural standards and ensure that security controls are effective, resilient and aligned with recognised frameworks and best practices. Key responsibilities will include developing SOC reference architectures, evaluating security technologies and leading the integration of SIEM, SOAR, EDR, NDR, vulnerability management and threat...

Learn more

SOC Security Infrastructure Engineer

Added 22/09/2026

We are seeking a SOC Security Infrastructure Engineer to strengthen and maintain the security infrastructure supporting a modern Security Operations Centre. In this role, you will design, implement, monitor and improve the platforms and services used to detect, investigate and respond to cyber threats. You will work closely with security analysts, infrastructure teams and other technical stakeholders to ensure security controls are resilient, effective and aligned with operational needs. Your responsibilities will include administering and tuning SIEM, SOAR, EDR, network monitoring and vulnerability management platforms; developing and maintaining detection rules, dashboards, alerts and automated response workflows; and integrating security tools...

Learn more

SOC Security Architect

Added 21/09/2026

We are seeking an experienced SOC Security Architect to design, develop and continuously improve the security architecture supporting a modern Security Operations Centre. In this role, you will define the technical vision for monitoring, detection and response capabilities across cloud, on-premises and hybrid environments. You will work closely with security operations, infrastructure, network, application and risk teams to ensure that security controls are effective, scalable and aligned with business and regulatory requirements. Your responsibilities will include designing and maintaining SOC reference architectures, developing security monitoring and detection strategies, and supporting the selection and integration of SIEM, SOAR, EDR, vulnerability management...

Learn more

Security Operations Centre (SOC) Manager (London)

Added 17/09/2026

We are seeking an experienced Security Operations Centre (SOC) Manager to lead and develop a high-performing cyber security operations function in London. You will be responsible for overseeing the day-to-day monitoring, detection, investigation and response to security incidents across a complex technology environment. Working closely with IT, risk, compliance and business stakeholders, you will ensure that threats are identified quickly, managed effectively and communicated clearly. Your responsibilities will include managing and mentoring SOC analysts, setting objectives and supporting professional development; maintaining effective shift patterns and operational coverage; and establishing procedures for incident response, escalation, threat hunting and security event management....

Learn more

Senior Cyber Security Operations Centre (SOC) Manager (London)

Added 14/09/2026

We are seeking an experienced Senior Cyber Security Operations Centre (SOC) Manager to lead and develop a high-performing security operations function based in London. This is a senior leadership role responsible for overseeing the organisation’s capability to detect, investigate and respond to cyber threats across a complex technology environment. You will provide strategic direction while remaining close enough to operational delivery to ensure effective monitoring, rapid incident response and continual improvement of security controls. You will manage SOC personnel, processes and technology, including security information and event management, endpoint detection and response, threat intelligence, vulnerability monitoring and incident management. Responsibilities...

Learn more

Senior Security Analyst (L3 SOC Analyst)

Added 11/09/2026

We are seeking a Senior Security Analyst (L3 SOC Analyst) to provide advanced security monitoring, investigation, and incident response within a fast-paced Security Operations Centre. In this role, you will act as a senior escalation point for complex and high-impact security events, helping to protect critical systems, applications, networks, and data. You will investigate sophisticated threats, determine root cause, assess business impact, and coordinate appropriate containment and remediation activities. Your responsibilities will include analysing alerts and telemetry from SIEM, EDR, network security, identity, cloud, and vulnerability management platforms; leading investigations into suspected compromise, malware, insider threats, credential abuse, and data...

Learn more

AI Security (SOC) Engineer

Added 04/09/2026

We are seeking an AI Security (SOC) Engineer to strengthen security monitoring, incident response, and protection of artificial intelligence and machine learning environments. In this role, you will help identify, investigate, and respond to cyber threats across cloud infrastructure, endpoints, applications, data platforms, and AI workloads. You will work closely with security engineering, IT, data science, and software development teams to improve detection capabilities and ensure that emerging AI-related risks are understood and addressed. Your responsibilities will include monitoring security alerts and events using SIEM, SOAR, EDR, cloud-native, and other security tools; triaging and investigating suspicious activity; coordinating incident response;...

Learn more

Security Operations Centre (SOC) Manager (m/f/d) 1

Added 04/09/2026

We are seeking an experienced Security Operations Centre (SOC) Manager to lead and develop a high-performing security operations function. In this role, you will be responsible for ensuring the effective monitoring, detection, investigation and response to cybersecurity threats across the organisation’s technology environment. You will manage daily SOC operations, establish clear processes and escalation paths, and ensure that security incidents are handled promptly, consistently and in accordance with defined procedures and regulatory requirements. Your responsibilities will include leading, mentoring and developing SOC analysts, coordinating shift coverage, and maintaining a strong culture of continuous improvement. You will oversee the tuning and...

Learn more

SOC Level 2 Security Analyst

Added 03/09/2026

We are seeking a skilled SOC Level 2 Security Analyst to investigate and respond to complex cybersecurity incidents within a fast-paced security operations environment. The successful candidate will monitor security alerts, validate potential threats, conduct detailed investigations, and determine the scope, impact, and priority of incidents. You will analyse data from SIEM, endpoint detection and response, network monitoring, identity, and vulnerability management platforms to identify malicious activity and support timely containment. Key responsibilities include triaging escalated alerts, correlating events across multiple data sources, performing threat hunting, and developing incident timelines and root-cause assessments. You will coordinate containment, eradication, and recovery...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.