> Markdown version of [/jobs/ext/1636551-security-operations-centre-soc-analyst](https://www.wearedevelopers.com/jobs/ext/1636551-security-operations-centre-soc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Operations Centre (SOC) Analyst

- **Company:** Insight
- **Location:** Sheffield, UK
- **Experience:** Experienced
- **Salary:** £39,598.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Cyber Security, Security Information and Event Management, Web Traffics, Large Language Models, Software Security, Mitre Att&ck, QRadar, Microsoft Sentinel, Cortex XSOAR Platform, Splunk, Vulnerability Analysis
- **Published:** July 22, 2026
- **Apply:** https://www.adzuna.co.uk/jobs/details/5808321002

## About the Role

Apply knowledge of MITRE ATT&CK framework, API security, and web traffic analysis.

 - Preferred: Experience with AI/LLM technologies, prompt-based attack vectors, SOAR platforms (e.g., Palo Alto XSOAR, Splunk SOAR), and Security+ or equivalent certification.
 - Target candidates with 3+ years' experience in SOC or security monitoring roles, ideally with enterprise or BFSI sector exposure.

## Description

Monitor, detect, and respond to security events related to Claude Code usage, with focus on AI-specific threats.

 - Analyze SIEM dashboards/alerts for anomalies such as unusual prompt volumes, DLP triggers, and authentication failures.
 - Investigate and triage security events; escalate confirmed incidents as necessary.
 - Develop and refine SIEM detection rules for AI/LLM threat scenarios, including prompt injection and data exfiltration.
 - Conduct daily review of audit logs and generate weekly security metrics reports.
 - Participate in incident response exercises, especially those involving AI-specific scenarios.
 - Maintain and update SOC runbooks for Claude Code incident response procedures.
 - Collaborate with cybersecurity teams to ensure best practices in AI security monitoring and incident handling.
 - Utilize tools such as Splunk, Microsoft Sentinel, or IBM QRadar for security monitoring.
 - Leverage strong analytical and investigation skills to identify and mitigate security risks.


## Related Videos

- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Extensionator - Rise of the Chromium](https://www.wearedevelopers.com/videos/119-extensionator-rise-of-the-chromium)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Getting under the skin: The Social Engineering techniques](https://www.wearedevelopers.com/videos/38-getting-under-the-skin-the-social-engineering-techniques)
- [WeAreDevelopers LIVE – AI vs the Web & AI in Browsers](https://www.wearedevelopers.com/videos/1743-wearedevelopers-live-ai-vs-the-web-ai-in-browsers)
- [WeAreDevelopers LIVE - Web Performance in an AI World](https://www.wearedevelopers.com/videos/2130-wearedevelopers-live-web-performance-in-an-ai-world)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)