> Markdown version of [/jobs/ext/2041524-security-analyst-iii-soc](https://www.wearedevelopers.com/jobs/ext/2041524-security-analyst-iii-soc). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Analyst III - SOC - **Company:** Tesco PLC - **Location:** Hertfordshire, UK - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Data Analysis, Application Integration Architecture, Intrusion Detection and Prevention, Kusto Query Language, Security Information and Event Management, Scripting, Mitre Att&ck, Cyber Threat Analysis, Pyramid - **Published:** August 13, 2026 - **Apply:** https://www.careerjet.co.uk/job/gbebf33204fc32944d62edc99ec6e84549/eaa ## About the Role * Over 2 years' experience working in an internal SOC or 3 years at an MSSP in a senior role. * Deep knowledge of cybersecurity frameworks: MITRE ATT&CK, Cyber Kill Chain, Incident Response Lifecycle, Pyramid of Pain. * Expertise in threat hunting and advanced investigative analysis. * Deep understanding of attacker tactics, techniques, and procedures (TTPs) and threat actor behaviours. * Proficiency in SIEM/XDR platforms and tuning detection logic, use cases, and alert optimisation. * Advanced querying and scripting skills (e.g., KQL, SPL) for data analysis and threat detection. * Ability to recommend tooling enhancements and process improvements to strengthen SOC capability. * Practical knowledge of networks, operating systems, and scripting for investigative purposes. * Experience in leading technical initiatives and driving service maturity improvements. * Demonstrated ability to coach and develop team members, fostering technical excellence. Desirable * GIAC certifications * Other relevant certifications such as CISSP or CISM will be considered. * A relevant degree, with professional experience. ## Description As a Security Analyst III, you will be the technical authority within the SOC, leading high-quality investigations and proactive threat hunting to protect the organisation from evolving threats. This hands-on role combines advanced technical expertise with leadership, coaching analysts, driving SOC maturity, and optimising tools and processes to set the standard for excellence across the team. You will act as a role model for SOC Analysts, coaching and guiding them to elevate technical capability and analytical rigour. Beyond day-to-day operations, you will lead maturity objectives, optimise SOC tooling, and identify opportunities for automation, AI integration, and impactful service improvements. You will also play a key role within the CSIRT team, collaborating on major incidents., The above information is a shortened summary, refer to our policies for full detail You will be responsible for * Deliver high-quality investigative analysis to ensure rapid and accurate incident resolution. * Act as the escalation point and technical authority for complex SOC investigations. * Lead proactive threat-hunting initiatives to identify and mitigate emerging threats before they impact the business. * Role-model analytical excellence and decision-making, setting the benchmark for SOC performance. * Coach and mentor analysts to build technical depth and confidence across the team. * Drive SOC maturity objectives, improving processes, tooling, and automation for greater efficiency. * Enhance SOC tool utilisation, including workflow optimisation. * Identify and implement automation, AI-driven enhancements, and playbook developments. * Support CSIRT activities during major incidents, ensuring coordinated and effective response. * Monitor MSSP performance, ensuring alert triage and investigations meet quality and timeliness standards. ## Related Videos - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [SMART Test Automation - the experience of legacy transformation](https://www.wearedevelopers.com/videos/100215-smart-test-automation-the-experience-of-legacy-transformation) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) - [Testing AI Agents: Automated Evaluation for Chatbots & RAG Systems](https://www.wearedevelopers.com/videos/100300-testing-ai-agents-automated-evaluation-for-chatbots-rag-systems) ## Related Articles - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london)