L3 SOC Analyst
A Global Organisation requires a Contract L3 SOC Analyst to join their Incident Response team acting as an escalaton point – Splunk & Defender
1. Day Rate: £475 – £500pd
2. IR35 Status: Inside
3. Duration: 6 months initially
4. Travel: 2 days a week in Berkshire
This L3 SOC Analyst will have the previous following experience:
5. Act as a lead investigator for high-severity security incidents, coordinating response activities and containment strategies.
6. Perform deep forensic analysis across endpoints, logs, and network traffic to uncover advanced threats.
7. Develop and fine-tune detection rules and correlation logic in SIEM platforms (e.g., Splunk).
8. Collaborate with engineering and threat intelligence teams to improve detection coverage and SOC workflows.
9. Mentor and guide L1/L2 analysts, providing training, quality reviews, and escalation support.
10. Design and execute proactive threat hunting campaigns using tools such as Defender, CrowdStrike, and custom scripts.
11. Contribute to playbook development, automation improvements (including Microsoft Co-pilot integration), and process optimization.
12. Produce executive-level incident reports, root cause analyses, and recommendations for remediation and hardening.