Security Operations Center Analyst

• Monitor priority incidents and ensure SLAs are met
• Act as the first escalation point for SOC Analysts
• Investigate and respond to security incidents when required
• Escalate complex incidents with clear, detailed findings
• Support incident response, client communications and incident bridges
• Maintain runbooks, internal documentation and the KQL library
• Tune detections and manage improvement requests through Azure DevOps

• Strong experience in a security operations or analytical role
• Hands-on expertise with Microsoft Defender and Microsoft Sentinel
• Advanced KQL skills and a strong understanding of Log Analytics
• Broad knowledge of the Microsoft security stack
• Strong written and verbal communication skills, including confidence communicating with clients during high-priority incidents

Desirable experience

• Python, Bicep, ARM templates or JSON
• Microsoft or security certifications such as SC-300, SC-900, AZ-900, Security+, Network+ or A+
• Previous experience mentoring junior analysts

We’re working with a Microsoft-focused technology consultancy seeking an experienced Senior SOC Analyst to join its security operations team.

You’ll work primarily within Microsoft’s Unified Security Operations Platform, including Microsoft Defender XDR and Microsoft Sentinel, helping manage incidents, support junior analysts and strengthen security operations for a range of clients.