Senior SOC Analyst

You will lead medium to high-severity investigations, support incident containment and remediation, and act as the escalation point for Tier 1 analysts. You’ll play a key part in threat hunting, detection engineering, improving SIEM capability and strengthening the organisation’s overall security posture.

What You Will Be Doing

• Leading triage, investigation and classification of security events
• Owning complex incident response, containment and root cause analysis
• Providing technical escalation support to junior analysts
• Conducting threat intelligence analysis and sharing insights
• Enhancing SIEM rules and detection logic
• Supporting onboarding of new data sources and improving correlations
• Leading post-incident reviews and reporting
• Engaging in vulnerability lifecycle management and remediation guidance
• Contributing to continuous improvement, automation and MITRE ATT&CK maturity

• 1-5 years’ SOC or operational cyber experience
• Strong hands-on experience with SIEM tools (LogRhythm, Elastic, Sentinel etc.)
• Ability to manage incidents end-to-end with confidence
• Solid understanding of networking, firewalls, IDS/IPS and endpoint security
• Strong analytical skills and clear written/ verbal communication
• Interest or experience in scripting and automation
• Certifications such as Security+, CEH, CISSP, CCSP, BTL1/2 are desirable but not essential, This role aligns perfectly with military experience across Intelligence analysis, Security operations and Technical leadership. Your ability to stay calm under pressure, assess complex information quickly and lead others effectively makes you a natural fit for a Tier 2 SOC environment. You will have the opportunity to mentor junior analysts, shape detection and response capability, influence security strategy and operate within a structured, operationally mature team that values and respects the experience Service Leavers bring.