Senior SOC Analyst (SIEM Focus)
Role details
Job location
Tech stack
Job description
We are working with a leading organisation in the defence and national security sector who are looking to engage a DV-cleared Senior SOC Analyst to support a critical cyber security programme.
This is a high impact contract where you will play a key role in maintaining and enhancing security operations within a highly secure environment
The Role
You will operate within a live Security Operations environment, supporting both day-to day cyber operations and the continuous improvement of detection capability and SOC tooling.
This is a hands-on role with a strong focus on incident response, SIEM optimisation, and threat detection., * Monitor, investigate and respond to security incidents across secure environments
- Develop and tune SIEM detection rules and correlation logic
- Support SIEM and SOAR tooling optimisation and automation
- Integrate and onboard log sources to improve visibility across systems
- Conduct threat analysis, including TTPs and IOCs
- Carry out network and host-based forensic investigations
- Support vulnerability management and reporting activities
- Work closely with internal stakeholders to ensure effective cyber defence
Requirements
- Active DV clearance (essential)
- Strong experience in SOC / Cyber Security Operations
- Hands-on experience with SIEM platforms (e.g. Splunk, Sentinel, Elastic)
- Ability to develop and tune detection rules and alerts
- Experience with incident response and threat analysis
- Knowledge of MITRE ATT&CK, IOCs, and TTPs
- Familiarity with SOAR tools and automation
- Scripting experience (e.g. Python, PowerShell, Bash) is beneficial, If you are a DV-cleared Senior SOC Analyst with strong SIEM and detection experience, and you're looking for your next contract in a secure environment, we'd be keen to speak.