Job Search

We are seeking an experienced SOC L3 Analyst to provide advanced security monitoring, incident response and threat investigation within a fast-paced security operations environment. This role will focus on managing complex and high-impact incidents, supporting junior analysts and helping to strengthen detection and response capabilities.

You will lead investigations into sophisticated security events across endpoints, networks, cloud environments and identity platforms. Responsibilities will include analysing alerts and log data, conducting threat hunting, performing malware and forensic analysis, and determining the scope, impact and root cause of incidents. You will be expected to develop effective containment, eradication and recovery strategies, while ensuring all activity is accurately documented.

The role will also involve creating and refining detection rules, use cases, playbooks and response procedures within SIEM, EDR and SOAR technologies. You will identify opportunities to improve monitoring coverage, reduce false positives and enhance the efficiency of operational processes. Where required, you will contribute to vulnerability assessments, threat intelligence analysis, post-incident reviews and the delivery of technical recommendations to relevant stakeholders.

As a senior member of the SOC, you will provide technical guidance and mentoring to L1 and L2 analysts, assist with escalations and support the continual development of team capability. You may also contribute to incident simulations, security reporting, audit activity and an on-call rota for critical events.

Applicants should have substantial experience in a security operations or incident response role, with strong knowledge of cyber attack techniques, threat intelligence, digital forensics and security monitoring principles. Experience with SIEM, EDR, network analysis and cloud security tools is essential, along with the ability to investigate events using scripting or query languages such as Python, PowerShell, KQL or SPL.

Relevant professional qualifications, such as GIAC, CISSP, CREST or equivalent certifications, are desirable. You will need excellent analytical and communication skills, sound judgement under pressure, and the ability to explain complex technical issues clearly to both technical and non-technical audiences.