> Markdown version of [/jobs/ext/2362879-level-3-soc-analyst](https://www.wearedevelopers.com/jobs/ext/2362879-level-3-soc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Level 3 SOC Analyst - **Company:** Capita resourcing - **Location:** Belfast, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Macintosh Computers, Software System Penetration Testing, Cloud Computing, Cyber Security, Information Systems, Linux, DevOps, Microsoft Software, Open Source Technology, Parsing, Kusto Query Language, Security Information and Event Management, Manual Data Entry, Microsoft Power Automate, QRadar, Cyber Threat Analysis, Azure Security Center, SC Clearance, Microsoft Sentinel - **Published:** August 27, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=5ce193afe705bdb4 ## About the Role * Level 3 SOC Analyst / Senior Cyber Security and security operations experience * Experience of onboarding, tuning, reporting and configuring SIEM solutions * Experience of threat intelligence * Leadership and mentoring experience and skills * Understanding of low-level concepts including operating systems and networking * Commercial experience in Penetration Testing and / or Security Monitoring * Understanding of networking and infrastructure design * Knowledge/experience of one or more System administration (Linux, Windows, Mac) * Self-motivated individual with flexible approach to working. * Excellent interpersonal skills with the ability to explain technical problems to non-technical business stakeholders at all levels. * Strong written and oral communication skills * Active or ability to obtain SC clearance, IT Certifications, including Network+, Security+ Protective Monitoring / SOC Certifications, including CySA+ Cyber Security Certifications, including CISMP, CISSP Experience with various Microsoft Technologies, including Microsoft Defender for Endpoint, Identity and Cloud Experience with SIEM platforms, including IBM QRadar, Microsoft Sentinel and LogRhythm In-depth experience with Microsoft Sentinel, including use case and rule development, workbook / playbook creation, KQL & Logic Apps / SOAR Experience in managing Microsoft Sentinel as an MSSP, including Lighthouse, and management and multi-customer environments using DevOps ## Description As an experienced Senior Cyber Security Operations Analyst, you will be responsible for handing security incidents received/escalated from the CSOC Analyst (Tier 1 or Tier 2) and perform a business impact analysis on the security incident. You will leverage a deep understanding of information security technologies, you will aid in triaging threat intelligence from multiple sources and add contextual information to the security incident, perform additional analysis and based on the business impact will recommend the response actions and escalation path. You will be guided by Threat Intelligence which is actionable information (e.g. IOCs/TTPs), conduct threat hunting activities; leveraging and analyzing sources of information as available through the SIEM, in addition identify and investigate potential suspicious activity as well as helping organizations identify, isolate and contain security issues. You will support the initial implementation and management of security related technologies, including (but not limited to) IBM QRadar, Microsoft Sentinel, MDE, MDI and Defender for Cloud. Successful candidate must hold - SC-200 Certification Successful candidate must be eligible for SC clearance, * Oversee completion of day-to-day checklist(s), including log review, management report scheduling & running, alert analysis, and escalation follow up * Remain current on cyber security trends and intelligence (open source and commercial) in order to guide the security analysis & identification capabilities of the CSOC team * Provide oversight, guidance and mentoring to L2 & L3 analysts, and fulfil SOC Manager responsibilities in the absence of the SOC Manager * Oversee a number of analysts as part of a virtual team of L1 and L2 analysts, including objectives setting, performance management / reviews, training & development, and BAU activities including shift cover etc. * Perform advanced event and incident analysis, including baseline establishment and trend analysis. * Support on-call arrangements as part of a Rota, to support L1 Analysts working out of hours * Support Major Incident Response activity, from a Protective Monitoring perspective, including supporting teams in identification, containment, and remediation of security related threat. * Provide timely advice and guidance on the response action plans for events and incidents based on incident type and severity. * Identify, create and implement improvements to procedures and processes, with the SOC Manager's approval. * Identify opportunities for SOC and client SIEM platform configuration improvements, use case development, monitoring rule creation, tuning & optimization. * Stakeholder and Client Reporting, and engagement * Assist in architectural design to facilitate the onboarding of new information systems, including the assessment, parsing, onboarding of log sources, and use case and rule development., We prioritise our customers by delivering effective cyber security monitoring, incident response, and expert guidance that protects their services and supports their success. Fearless Innovation We embrace continuous improvement by identifying new threats, enhancing detection capabilities, and driving innovative security solutions that strengthen our services. Achieve Together We collaborate across teams, share knowledge, and support one another to deliver outstanding security outcomes and achieve our collective goals. Everyone is Valued We foster an inclusive and supportive environment where every colleague is respected, empowered to develop, and encouraged to contribute their unique perspectives. Join Capita - Where Innovation Meets Opportunity, We are committed to building a workforce that reflects the diversity of the communities we serve. As part of our strategic goals, we are focused on accelerating gender and ethnic representation in leadership roles. We warmly encourage applications from women and individuals from Black, Asian, and other ethnic minority backgrounds. We're an equal opportunity and Disability Confident employer, which means we recruit and develop people based on their merit and passion. We're committed to providing an inclusive, barrier-free recruitment process and working environment for everyone. If you need the job description or application form in an alternative format (such as large print or audio), or if you'd like to discuss other changes or support you might need going forward, please email reasonableadjustments@capita.com and we'll get back to you. For more information about equal opportunities and process adjustments, please visit the Capita Careers website. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [#90DaysOfDevOps - The DevOps Learning Journey](https://www.wearedevelopers.com/videos/548-90daysofdevops-the-devops-learning-journey) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) ## Related Articles - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk)