Senior SOC / IR Specialist

Reference: 5fkcaebvyhi8qcwvrfzu

We are seeking a Senior SOC / IR Specialist to strengthen our cyber security operations and incident response capability. This is a hands-on role for an experienced security professional who can investigate complex threats, lead incident response activities and help improve the organisation’s overall security posture. You will work closely with colleagues across technology, risk and business functions to detect, contain and recover from security incidents.

Key responsibilities will include monitoring and analysing alerts from SIEM, EDR, network security and cloud platforms; investigating suspected compromises; and conducting detailed triage, threat hunting and forensic analysis. You will lead or support the end-to-end response to incidents, including scoping, containment, eradication, recovery and post-incident reviews. You will also produce clear technical reports, maintain accurate case records and provide timely updates to relevant stakeholders.

The role will involve developing and refining detection rules, playbooks, operating procedures and incident response processes. You will contribute to vulnerability and threat assessments, undertake proactive threat hunting, and use threat intelligence to identify emerging risks. You may also support security tooling improvements, automation initiatives, incident simulations and the mentoring of less experienced analysts.

We are looking for substantial experience in a Security Operations Centre, incident response or a closely related security function, together with strong knowledge of attack techniques, malware behaviour, security monitoring and digital forensics. You should be confident working with SIEM and endpoint detection technologies, interpreting logs and network traffic, and analysing events across on-premises and cloud environments.

Relevant professional qualifications such as GCIH, GCIA, GCFA, CISSP, CISM or equivalent experience would be advantageous. Excellent communication and prioritisation skills are essential, as is the ability to remain calm and methodical during high-severity incidents. You must be comfortable working collaboratively, challenging assumptions constructively and participating in an on-call or out-of-hours rota where required.

COMPETITIVE SALARY
Added 26/10/2026
Reference: 5fkcaebvyhi8qcwvrfzu

Other similar jobs

SOC Engineer - Security Operations Centre (SOC)

Added 23/10/2026

We are seeking a SOC Engineer to join a security operations function responsible for protecting critical systems, applications and data. This is an opportunity to work in a fast-paced environment, supporting the detection, investigation and response to cyber security incidents while helping to strengthen the organisation’s overall security posture. You will monitor security alerts and events across the environment, investigate suspicious activity and assess potential threats using security information and event management (SIEM), endpoint detection and response (EDR), network monitoring and vulnerability management tools. You will triage incidents, determine their severity and impact, and coordinate appropriate containment, eradication and recovery...

Learn more

Security Specialist (SOC & IR)

Added 05/10/2026

We are seeking a Security Specialist (SOC & IR) to help protect critical systems, applications and data against evolving cyber threats. In this role, you will monitor and investigate security events, coordinate incident response activities and support the continuous improvement of detection and response capabilities. You will work closely with infrastructure, application, identity and risk teams to identify vulnerabilities, reduce exposure and strengthen the organisation’s overall security posture. Your responsibilities will include triaging alerts from SIEM, EDR, email security, cloud and network monitoring platforms; investigating suspicious activity; performing threat hunting; and escalating confirmed incidents in line with established procedures. You...

Learn more

Cyber SOC Specialist - ESN

Added 21/09/2026

We are seeking a Cyber SOC Specialist to join a security operations team responsible for monitoring, investigating and responding to cyber threats across a complex technology environment. In this role, you will help protect critical systems, applications and data by identifying suspicious activity, assessing security alerts and coordinating timely responses to incidents. Your responsibilities will include monitoring security information and event management (SIEM) platforms, endpoint detection and response tools, network security solutions and other monitoring technologies. You will triage alerts, investigate potential compromises, analyse logs and security events, and determine the scope and impact of incidents. You will also support...

Learn more

(Senior) SOC Analyst Engineer*

Added 27/10/2026

We are seeking a Senior SOC Analyst Engineer to support the monitoring, detection and response capability of a modern security operations function. This is an opportunity to play a key role in protecting critical systems, investigating complex threats and helping to strengthen security controls across a diverse technology environment. You will monitor and triage security alerts, assess indicators of compromise and lead the investigation of suspected incidents from initial detection through to containment and recovery. The role will involve analysing data from SIEM, endpoint detection and response, network monitoring and vulnerability management platforms, while distinguishing genuine threats from false positives....

Learn more

Senior SOC Analyst

Added 27/10/2026

We are seeking an experienced Senior SOC Analyst to join a dynamic security operations function. In this role, you will help protect critical systems, applications and data by leading the investigation and response to complex cyber security incidents. You will work closely with colleagues across infrastructure, cloud, engineering and risk teams to identify threats, reduce exposure and strengthen security controls. Your responsibilities will include monitoring and analysing security alerts from SIEM, EDR, network, cloud and vulnerability management platforms; investigating suspicious activity; and coordinating timely incident response. You will conduct advanced threat hunting, correlate indicators of compromise, assess potential business impact...

Learn more

Senior Infrastructure Operations Engineer (NOC/SOC)

Added 20/10/2026

We are seeking a Senior Infrastructure Operations Engineer (NOC/SOC) to provide expert-level monitoring, support and operational assurance across a complex, highly available technology environment. You will play a key role in maintaining the stability, security and performance of critical infrastructure, while supporting the rapid identification and resolution of incidents. Working across network operations and security operations, you will collaborate with technical teams, service providers and stakeholders to ensure reliable service delivery around the clock. Your responsibilities will include leading the investigation and resolution of major infrastructure, network and security incidents; monitoring alerts, events and performance trends; and coordinating escalations in...

Learn more

Senior SOC Analyst

Added 07/10/2026

We are seeking a Senior SOC Analyst to join a high-performing cybersecurity operations team responsible for protecting critical systems, applications, and data. In this role, you will monitor and investigate security events, lead the response to complex incidents, and help strengthen detection and response capabilities across the organisation. You will act as a senior point of escalation for analysts, supporting the effective triage, containment, eradication, and recovery of threats in a fast-paced environment. Your responsibilities will include analysing alerts from SIEM, endpoint detection and response, network monitoring, identity, and cloud security platforms; investigating suspicious activity and coordinating incident response activities;...

Learn more

Senior SOC Engineer (Sentinel One)

Added 06/10/2026

We are seeking a Senior SOC Engineer to strengthen a security operations function responsible for protecting critical systems, networks, applications, and data. In this role, you will provide advanced technical expertise across security monitoring, incident detection, investigation, and response, with a particular focus on SentinelOne and endpoint protection capabilities. You will work closely with security analysts, infrastructure teams, and other technical stakeholders to identify threats, contain incidents, and improve the organisation’s overall security posture. Your responsibilities will include tuning and maintaining SentinelOne policies, detection rules, alerts, and response workflows; investigating complex endpoint and network security events; leading or supporting incident...

Learn more

Senior SOC Analyst

Added 05/10/2026

We are seeking a Senior SOC Analyst to join a security operations function responsible for protecting critical systems, applications, and data. In this role, you will provide advanced monitoring, investigation, and response capabilities across a broad range of security events. You will analyse alerts from SIEM, EDR, network, cloud, and other security platforms, distinguish genuine threats from false positives, and lead the investigation of complex or high-impact incidents. You will also support continuous improvement of detection coverage, incident response procedures, and operational processes. Key responsibilities include conducting threat hunting and forensic analysis, correlating events across multiple data sources, assessing indicators...

Learn more

Senior SOC Analyst

Added 22/09/2026

We are seeking an experienced Senior SOC Analyst to strengthen a security operations function and help protect critical systems, applications, networks, and data. In this role, you will monitor and investigate security events, lead the response to complex incidents, and provide expert guidance to analysts across the team. You will work closely with infrastructure, cloud, application, and risk teams to identify threats, reduce exposure, and improve the organisation’s overall security posture. Your responsibilities will include triaging and analysing alerts from SIEM, EDR, network monitoring, identity, and cloud security platforms; conducting in-depth investigations using log analysis, threat intelligence, and forensic techniques;...

Learn more

Senior Cyber Security Operations Centre (SOC) Manager (London)

Added 14/09/2026

We are seeking an experienced Senior Cyber Security Operations Centre (SOC) Manager to lead and develop a high-performing security operations function based in London. This is a senior leadership role responsible for overseeing the organisation’s capability to detect, investigate and respond to cyber threats across a complex technology environment. You will provide strategic direction while remaining close enough to operational delivery to ensure effective monitoring, rapid incident response and continual improvement of security controls. You will manage SOC personnel, processes and technology, including security information and event management, endpoint detection and response, threat intelligence, vulnerability monitoring and incident management. Responsibilities...

Learn more

Acquisition Cybersecurity Operations (ACO) - Senior SOC Analyst

Added 11/09/2026

We are seeking an experienced Acquisition Cybersecurity Operations (ACO) – Senior SOC Analyst to support the protection, monitoring and continuous improvement of complex digital environments. In this role, you will act as a senior member of a security operations function, providing expert analysis of security events, coordinating incident response activities and helping maintain effective operational security across enterprise systems, networks and cloud services. Your responsibilities will include monitoring and triaging alerts from SIEM, endpoint detection and response, network security and vulnerability management platforms; investigating suspected compromises; correlating events across multiple data sources; and determining the severity, scope and potential impact...

Learn more

Senior Security Analyst (L3 SOC Analyst)

Added 11/09/2026

We are seeking a Senior Security Analyst (L3 SOC Analyst) to provide advanced security monitoring, investigation, and incident response within a fast-paced Security Operations Centre. In this role, you will act as a senior escalation point for complex and high-impact security events, helping to protect critical systems, applications, networks, and data. You will investigate sophisticated threats, determine root cause, assess business impact, and coordinate appropriate containment and remediation activities. Your responsibilities will include analysing alerts and telemetry from SIEM, EDR, network security, identity, cloud, and vulnerability management platforms; leading investigations into suspected compromise, malware, insider threats, credential abuse, and data...

Learn more

Senior SOC Analyst - Manchester

Added 07/09/2026

We are seeking a Senior SOC Analyst to join a security operations team based in Manchester. This is an opportunity to play a leading role in protecting critical systems, applications and data from evolving cyber threats. You will monitor and investigate security events, assess potential incidents and coordinate effective responses across a range of technical environments. The successful candidate will bring strong analytical skills, sound judgement and the confidence to take ownership of complex investigations. Responsibilities will include triaging and escalating alerts from SIEM, EDR, network monitoring and threat intelligence platforms; investigating suspicious activity across endpoints, networks, cloud services and...

Learn more

Security Consultant - Incident Responder (SOC/DFIR)

Added 03/11/2026

We are seeking a Security Consultant – Incident Responder (SOC/DFIR) to help organisations prepare for, respond to and recover from complex cyber security incidents. This is a hands-on role for an experienced professional who can combine technical investigation, sound judgement and clear communication while working in high-pressure situations. You will lead or support incident response engagements from initial triage through to containment, eradication and recovery. Responsibilities will include analysing alerts and suspicious activity, conducting host and network-based investigations, collecting and preserving digital evidence, and identifying the root cause, scope and impact of security incidents. You will use SIEM, EDR, network...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.