SOC L3 Analyst

Reference: 8f7sqzmi4tglrqjlofpa

We are seeking an experienced SOC L3 Analyst to provide advanced security monitoring, incident response and threat investigation within a fast-paced security operations environment. This role will focus on managing complex and high-impact incidents, supporting junior analysts and helping to strengthen detection and response capabilities.

You will lead investigations into sophisticated security events across endpoints, networks, cloud environments and identity platforms. Responsibilities will include analysing alerts and log data, conducting threat hunting, performing malware and forensic analysis, and determining the scope, impact and root cause of incidents. You will be expected to develop effective containment, eradication and recovery strategies, while ensuring all activity is accurately documented.

The role will also involve creating and refining detection rules, use cases, playbooks and response procedures within SIEM, EDR and SOAR technologies. You will identify opportunities to improve monitoring coverage, reduce false positives and enhance the efficiency of operational processes. Where required, you will contribute to vulnerability assessments, threat intelligence analysis, post-incident reviews and the delivery of technical recommendations to relevant stakeholders.

As a senior member of the SOC, you will provide technical guidance and mentoring to L1 and L2 analysts, assist with escalations and support the continual development of team capability. You may also contribute to incident simulations, security reporting, audit activity and an on-call rota for critical events.

Applicants should have substantial experience in a security operations or incident response role, with strong knowledge of cyber attack techniques, threat intelligence, digital forensics and security monitoring principles. Experience with SIEM, EDR, network analysis and cloud security tools is essential, along with the ability to investigate events using scripting or query languages such as Python, PowerShell, KQL or SPL.

Relevant professional qualifications, such as GIAC, CISSP, CREST or equivalent certifications, are desirable. You will need excellent analytical and communication skills, sound judgement under pressure, and the ability to explain complex technical issues clearly to both technical and non-technical audiences.

COMPETITIVE SALARY
Added 29/10/2026
Reference: 8f7sqzmi4tglrqjlofpa

Other similar jobs

SOC Engineer - Security Operations Centre (SOC)

Added 23/10/2026

We are seeking a SOC Engineer to join a security operations function responsible for protecting critical systems, applications and data. This is an opportunity to work in a fast-paced environment, supporting the detection, investigation and response to cyber security incidents while helping to strengthen the organisation’s overall security posture. You will monitor security alerts and events across the environment, investigate suspicious activity and assess potential threats using security information and event management (SIEM), endpoint detection and response (EDR), network monitoring and vulnerability management tools. You will triage incidents, determine their severity and impact, and coordinate appropriate containment, eradication and recovery...

Learn more

Senior Security Analyst (L3 SOC Analyst)

Added 11/09/2026

We are seeking a Senior Security Analyst (L3 SOC Analyst) to provide advanced security monitoring, investigation, and incident response within a fast-paced Security Operations Centre. In this role, you will act as a senior escalation point for complex and high-impact security events, helping to protect critical systems, applications, networks, and data. You will investigate sophisticated threats, determine root cause, assess business impact, and coordinate appropriate containment and remediation activities. Your responsibilities will include analysing alerts and telemetry from SIEM, EDR, network security, identity, cloud, and vulnerability management platforms; leading investigations into suspected compromise, malware, insider threats, credential abuse, and data...

Learn more

Junior SOC Analyst – Leeds

Added 29/10/2026

We are seeking a motivated Junior SOC Analyst to join a security operations team in Leeds. This is an excellent opportunity for someone at the beginning of their cyber security career to develop practical experience in monitoring, investigating and responding to security events within a fast-paced environment. You will monitor security alerts and events using SIEM, endpoint detection and response, vulnerability management and other security tools. Working within established procedures, you will investigate suspicious activity, assess potential risks and escalate incidents to senior analysts where appropriate. You will also support the accurate recording, tracking and closure of incidents, ensuring that...

Learn more

Junior SOC Analyst

Added 29/10/2026

An exciting opportunity has arisen for a Junior SOC Analyst to join a security operations team responsible for monitoring, investigating and responding to cyber security events. This role would suit someone who is building a career in cyber security and is keen to develop practical experience within a collaborative, fast-paced environment. You will monitor security alerts and events using security information and event management (SIEM) tools, reviewing activity across networks, systems and applications. You will assist with the investigation and triage of suspected incidents, identify potential indicators of compromise, and escalate significant or complex matters in line with established procedures....

Learn more

Senior SOC Analyst

Added 27/10/2026

We are seeking an experienced Senior SOC Analyst to join a dynamic security operations function. In this role, you will help protect critical systems, applications and data by leading the investigation and response to complex cyber security incidents. You will work closely with colleagues across infrastructure, cloud, engineering and risk teams to identify threats, reduce exposure and strengthen security controls. Your responsibilities will include monitoring and analysing security alerts from SIEM, EDR, network, cloud and vulnerability management platforms; investigating suspicious activity; and coordinating timely incident response. You will conduct advanced threat hunting, correlate indicators of compromise, assess potential business impact...

Learn more

Junior Security Operations Centre (SOC) Analyst

Added 27/10/2026

We are seeking a motivated Junior Security Operations Centre (SOC) Analyst to join a collaborative cyber security team. This is an excellent opportunity for someone at the beginning of their security career to develop practical experience in monitoring, investigating and responding to cyber threats within a structured operational environment. In this role, you will monitor security alerts and events using SIEM, endpoint protection and other security tools. You will investigate suspicious activity, assess potential risks and escalate incidents in line with established procedures. You will also support the triage and documentation of security incidents, maintain accurate case records and contribute...

Learn more

(Senior) SOC Analyst Engineer*

Added 27/10/2026

We are seeking a Senior SOC Analyst Engineer to support the monitoring, detection and response capability of a modern security operations function. This is an opportunity to play a key role in protecting critical systems, investigating complex threats and helping to strengthen security controls across a diverse technology environment. You will monitor and triage security alerts, assess indicators of compromise and lead the investigation of suspected incidents from initial detection through to containment and recovery. The role will involve analysing data from SIEM, endpoint detection and response, network monitoring and vulnerability management platforms, while distinguishing genuine threats from false positives....

Learn more

SOC Analyst

Added 23/10/2026

An exciting opportunity has arisen for a SOC Analyst to join a security operations function responsible for monitoring, investigating and responding to cyber security events. You will help protect critical systems, applications and data by identifying suspicious activity, assessing potential threats and supporting timely incident response. Working within a collaborative team, you will monitor security alerts from a range of tools, including SIEM, endpoint detection and response, network monitoring and vulnerability management platforms. You will triage alerts, investigate unusual behaviour, determine the severity and impact of incidents, and escalate appropriately in line with established procedures. Your responsibilities will include analysing...

Learn more

SOC Analyst Level 2

Added 21/10/2026

We are seeking a skilled SOC Analyst Level 2 to join a security operations team responsible for monitoring, investigating and responding to cyber security threats across a complex technology environment. This role will suit an experienced security professional who can assess incidents confidently, work methodically under pressure and contribute to the continuous improvement of security monitoring and response processes. You will analyse alerts from SIEM, endpoint detection and response, network monitoring and other security tools, distinguishing genuine threats from false positives. Your responsibilities will include investigating suspicious activity, validating indicators of compromise, conducting initial threat hunting and escalating confirmed or...

Learn more

Senior SOC Analyst

Added 07/10/2026

We are seeking a Senior SOC Analyst to join a high-performing cybersecurity operations team responsible for protecting critical systems, applications, and data. In this role, you will monitor and investigate security events, lead the response to complex incidents, and help strengthen detection and response capabilities across the organisation. You will act as a senior point of escalation for analysts, supporting the effective triage, containment, eradication, and recovery of threats in a fast-paced environment. Your responsibilities will include analysing alerts from SIEM, endpoint detection and response, network monitoring, identity, and cloud security platforms; investigating suspicious activity and coordinating incident response activities;...

Learn more

SOC Analyst (6 month FTC)

Added 05/10/2026

We are seeking a proactive SOC Analyst for a six-month fixed-term contract to support the monitoring, detection and response to cyber security threats. Working as part of a collaborative security operations function, you will help protect critical systems, applications and data by investigating suspicious activity and ensuring that incidents are identified and managed promptly. Key responsibilities will include monitoring security alerts from SIEM, endpoint detection and response, network monitoring and other security tools; triaging and investigating potential incidents; analysing logs, indicators of compromise and user activity; and escalating confirmed or high-risk events in line with established procedures. You will support...

Learn more

Senior SOC Analyst

Added 05/10/2026

We are seeking a Senior SOC Analyst to join a security operations function responsible for protecting critical systems, applications, and data. In this role, you will provide advanced monitoring, investigation, and response capabilities across a broad range of security events. You will analyse alerts from SIEM, EDR, network, cloud, and other security platforms, distinguish genuine threats from false positives, and lead the investigation of complex or high-impact incidents. You will also support continuous improvement of detection coverage, incident response procedures, and operational processes. Key responsibilities include conducting threat hunting and forensic analysis, correlating events across multiple data sources, assessing indicators...

Learn more

Graduate SOC Analyst

Added 02/10/2026

We are seeking a motivated Graduate SOC Analyst to join a security operations team and develop practical experience in monitoring, investigating, and responding to cyber security incidents. This is an excellent opportunity for a recent graduate or early-career professional with a strong interest in information security, threat detection, and continuous learning. You will work alongside experienced analysts in a collaborative environment, supporting the protection of systems, networks, applications, and data. In this role, you will monitor security alerts and events using security information and event management (SIEM) tools, review logs, and conduct initial investigations into suspicious activity. Responsibilities will include...

Learn more

SOC Analyst

Added 28/09/2026

We are seeking a SOC Analyst to monitor, investigate, and respond to cybersecurity events across a diverse technology environment. The successful candidate will work as part of a security operations team responsible for identifying potential threats, assessing risk, and helping to protect systems, networks, applications, and data. This role is suited to someone with strong analytical skills, sound technical judgement, and a genuine interest in security operations and incident response. Key responsibilities include monitoring security alerts from SIEM, endpoint detection and response, firewall, identity, cloud, and vulnerability management platforms; triaging and investigating suspicious activity; and escalating confirmed or complex incidents...

Learn more

Graduate SOC Analyst

Added 24/09/2026

We are seeking a motivated Graduate SOC Analyst to join a security operations team and help protect critical systems, networks, and data. This is an excellent opportunity for a recent graduate or early-career professional to develop practical experience in a structured, collaborative environment. You will support the monitoring, investigation, and response to security events while building your knowledge of modern cyber defence technologies and processes. Your responsibilities will include monitoring security information and event management (SIEM) platforms, reviewing alerts, assessing potential threats, and escalating incidents in accordance with established procedures. You will assist with investigating suspicious activity across endpoints, networks,...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.