Job Description
Security Operations Analyst - Hands On
Contract 6 months initial
Location London - Three days per week on site
Rate £550 - £650 per day inside IR35
We're supporting a client looking to appoint an experienced SOC Analyst to help strengthen and mature an existing Security Operations function.
The team consists of four SOC Analysts and needs someone who can operate as a senior technical lead while remaining hands on across investigations, incident response and operational improvement.
This role would suit someone who enjoys improving standards, challenging assumptions and helping teams make better security decisions in a fast moving environment.
The role:
* You will act as a senior escalation point for complex or high risk security events while helping uplift the capability of the wider SOC team.
* You will review investigations, validate analyst outputs and ensure recommendations to the business are technically accurate, commercially sensible and risk based.
* Alongside day to day operational support, you will also help identify opportunities to improve SOC workflows, processes and automation.
Key responsibilities:
* Review and validate SOC investigations and incident responses.
* Support analysts with complex or ambiguous security events.
* Improve the quality and consistency of security investigations.
* Challenge findings where needed and ensure recommendations are actionable.
* Drive operational improvements across the SOC function.
* Identify opportunities for automation and efficiency gains.
* Provide mentoring, guidance and technical leadership to analysts.
* Act as a trusted escalation point for security operations issues.
What we're looking for:
* Strong background operating within a Security Operations Centre environment.
* Experience leading or uplifting SOC teams in a hands on capacity.
* Ability to assess investigations critically and improve response quality.
* Experience improving SOC processes, workflows or automation.
* Strong stakeholder communication skills.
* Comfortable operating in a fast paced environment with autonomy.
Tech environment:
* CrowdStrike
* Microsoft Defender
* Splunk or similar SIEM platforms
* Qualys
Reasonable Adjustments:
Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients.
If you need any help or adjustments during the recruitment process for any reason, please let us know when you apply or talk to the recruiters directly so we can support you.