About this role
Salary: £49,000 - 89,000 per year
Requirements: Previous experience working within a Security Operations Centre (SOC), cyber security operations or incident response environmentExperience investigating and responding to complex security alerts and incidentsStrong knowledge of SIEM platforms and security event analysisExperience with endpoint detection and response (EDR) technologiesA good understanding of incident response processes and methodologiesKnowledge of common attack techniques, tactics and procedures, including the MITRE ATT&CK frameworkExperience analysing logs across endpoint, network, cloud or identity environmentsAn understanding of threat intelligence and indicators of compromiseStrong analytical and problem-solving skillsExcellent written and verbal communication skillsThe ability to clearly communicate technical findings to both technical and non-technical stakeholdersExperience with technologies such as Microsoft Sentinel, Splunk, Microsoft Defender, CrowdStrike or similar security platforms would be highly beneficial Responsibilities: Investigate and analyse escalated security alerts from Tier 1 analystsConduct detailed incident investigations to determine scope, impact and root causeMonitor and analyse activity across SIEM, EDR and other security platformsIdentify indicators of compromise, suspicious activity and emerging threatsSupport incident response and containment activitiesPerform threat hunting activities to proactively identify potential security risksEscalate significant or complex incidents where appropriateWork closely with Tier 1 and Tier 3 analysts, incident responders and other technical teamsTune and improve detection rules and use cases to reduce false positives and improve threat detectionAnalyse logs and security events from endpoints, networks, cloud environments and other infrastructureProduce clear investigation reports and document incidents, findings and recommendationsMaintain awareness of the latest cyber threats, vulnerabilities and attacker techniquesContribute to the ongoing development and improvement of SOC processes and capabilities Technologies: CloudSupportNetworkSecuritySplunk More:
We are a growing cyber security organisation strengthening our Security Operations capability with a Tier 2 SOC Analyst. You will join a collaborative cyber security team responsible for monitoring, investigating and responding to security threats across complex client environments. This role offers exposure to a wide range of technologies, security tools and client environments, with the opportunity to develop your technical expertise within a fast-paced SOC environment. We work as part of an experienced Security Operations team, with opportunities to investigate real-world security threats and develop your career across incident response, threat hunting and advanced security operations. The role is based in London on a hybrid working basis, with some flexibility depending on operational and client requirements.
last updated 36 week of 2026