> Markdown version of [/jobs/ext/2791305-senior-security-operation-centre-soc-analyst](https://www.wearedevelopers.com/jobs/ext/2791305-senior-security-operation-centre-soc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Security Operation Centre (SOC) Analyst - **Company:** Civil Aviation Authority - **Location:** Horley, UK - **Experience:** Expert - **Salary:** £45,000.0 - £52,937.0 - **Contract:** Permanent contract - **Skills:** Microsoft Azure, Cyber Security, Kusto Query Language, Security Information and Event Management, Microsoft Power Automate, Mitre Att&ck, Cybercrime, Microsoft Sentinel, Blue Team (Cyber Security) - **Published:** September 8, 2026 - **Apply:** https://www.collegerecruiter.com/job/2840674729-senior-security-operation-centre-soc-analyst ## About the Role Minimum essential requirements for the role: * Proven experience working in a Security Operations Centre or similar threat detection/incident response role * Strong analytical and investigative skills, with the ability to work independently on complex cases * Proficiency in SIEM and EDR tools, particularly Microsoft Sentinel and Microsoft Defender XDR * Familiarity with the MITRE ATT&CK framework and common attacker techniques * Experience contributing to the development or tuning of security detections * A proactive mindset, with a willingness to lead on assigned tasks and support others * Clear communication skills, both written and verbal, for documenting investigations and collaborating within the team * Mentor junior analysts and develop training materials and tabletop exercises * CompTIA CySA+ certification or equivalent intermediate certification Desirable skills for the role: * Experience writing or modifying KQL queries for alerting, threat hunting, or dashboards * Exposure to Logic Apps, Power Automate, or other SOC automation tools * Experience contributing to post-incident reviews or security process improvements * Interest in mentoring, coaching, or supporting junior team members * Completion of relevant security certifications (e.g. GCFA, Blue Team Level 1 (BTL1) or Azure Security Engineer Associate) ## Description With the establishment of a dedicated Security Operations Centre (SOC) at the CAA in early 2026, we are entering a transformative phase in our cyber defence capability. This strategic initiative marks a significant investment in strengthening our ability to detect, respond to, and recover from cyber threats in real time. The Senior SOC Analyst plays a critical role within the CAA's Security Operations Centre, supporting the detection, investigation, and response to cyber threats targeting the Civil Aviation Authority. Acting as a senior technical escalation point and mentor for other analysts, this role ensures the smooth day-to-day running of SOC operations., The Senior SOC Analyst supports the SOC Manager in maintaining high operational standards, delivering improvements across tooling and playbooks, and helping uplift the capability of junior analysts through coaching and collaboration. While this is not a formal leadership role, it requires a high degree of autonomy, initiative, and technical proficiency., We are proud to be an equal opportunity employer and celebrate our diversity ensuring all backgrounds are included here at the CAA. As a member of the Disability Confident scheme, applicants who meet the minimum criteria for a role with us will be guaranteed an interview. ## Related Videos - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see) ## Related Articles - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk)