We’re looking for a Senior SOC Analyst with strong experience across security operations and incident response, ideally working at a Tier 2/3 level within enterprise environments. This is a hands-on role supporting the investigation, escalation and resolution of security incidents within a mature and fast-paced SOC.
You’ll work closely with wider security teams to ensure incidents are effectively triaged and resolved, while helping to identify patterns, risks and opportunities to improve overall security posture.
What you’ll be doing
* Investigate and respond to security incidents across a range of technologies and environments
* Support escalation of complex incidents, ensuring thorough analysis and resolution
* Identify root causes, risks and remediation actions as part of incident handling
* Work with SIEM platforms (e.g. Sentinel, Splunk, QRadar or similar) to monitor and analyse activity
* Use query languages (e.g. KQL or similar) to support investigations where required
* Collaborate with wider teams to improve detection, response and overall SOC capability
* Work with endpoint and detection tooling (e.g. CrowdStrike or similar) as part of investigations
* Manage and prioritise multiple tickets within a queue-based environment
* Support phishing investigations and general BAU SOC activities
* Maintain accurate records and workflows via ticketing systems such as ServiceNow
Hybrid – Yorkshire or London
#J-18808-Ljbffr