> Markdown version of [/jobs/ext/1372007-security-operations-analyst](https://www.wearedevelopers.com/jobs/ext/1372007-security-operations-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Operations Analyst - **Company:** G-Research - **Location:** London, UK - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Amazon Web Services, Microsoft Azure, Cloud Computing, Cyber Security, Linux, File Systems, Intrusion Detection and Prevention, Python (Programming Language), Network Security, Windows PowerShell, Security Information and Event Management, Scripting, High Performance Computing, HybridCloud, Cybercrime - **Published:** July 22, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=4a33740a8893e093 ## About the Role The ideal candidate will have the following skills and experience: * Experience in a SOC, CSIRT or security operations role with hands-on involvement in alert handling and investigations * Strong understanding of security fundamentals, including network security, endpoint artefacts, authentication patterns, malware behaviours and common attack techniques * Experience using SIEM, XDR or SOAR tools such as Elastic Security, Sentinel, Azure Defender XDR or AWS Security Hub * Ability to analyse logs, correlate events and develop investigative hypotheses * Familiarity with forensic concepts, including filesystems, memory artefacts, persistence mechanisms, log sources and cloud control-plane events * Strong technical curiosity and desire to develop expertise in incident response, forensics and detection engineering * Strong written and verbal communication skills with a collaborative approach to working with analysts and engineers * Experience with scripting or automation using Python or PowerShell is desirable * Exposure to cloud platforms, HPC environments or relevant certifications such as GCIH or GCIA is beneficial ## Description We're looking for a Security Operations Analyst to join Security Operations Centre (SOC). This team monitors, investigates and responds to security incidents across G-Research's high-performance compute (HPC) environments, hybrid cloud platforms and corporate estate. Operating on the front line of our defensive capability, the SOC analyses alerts, investigates threats and supports their detection, containment and eradication. As a Security Operations Analyst, you will work across a broad range of technologies and investigative disciplines, developing your skills in triage, incident response, detection engineering, and forensic analysis. You will collaborate closely with the wider security function and engineering teams to continuously improve of our detection and response capabilities. This role is ideal for someone with experience in a SOC or incident response team who wants to deepen their technical skills, contribute directly to meaningful defensive work and progress towards senior responsibilities. Key responsibilities * Performing triage, investigation and escalation of security alerts across HPC, cloud and corporate environments * Supporting incident response activities including containment, remediation and reporting * Conducting host and log-based forensic analysis across Windows, Linux, cloud, network and application environments * Executing threat hunting tasks to identify abnormal or suspicious behaviours beyond existing detections * Developing and refining detection rules, analytics and playbooks alongside senior analysts * Maintaining accurate investigation records and case documentation * Contributing to the continuous improvement of workflows, tooling and operational processes * Collaborating with colleagues, engineers and internal stakeholders to support investigations, knowledge sharing and ongoing improvements ## Related Videos - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) ## Related Articles - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk)