> Markdown version of [/jobs/ext/3061723-senior-soc-analyst](https://www.wearedevelopers.com/jobs/ext/3061723-senior-soc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior SOC Analyst

- **Company:** Ballantyne Technology Associates Ltd
- **Location:** Nailsea, UK
- **Experience:** Expert
- **Salary:** £75,000.0 - £90,000.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Business Software, Cloud Computing, Cloud Computing Security, Cyber Security, Continuous Integration, DevOps, Red Team (Cyber Security), Security Information and Event Management, Working Model 2D, Data Logging, Kubernetes, Cybercrime, Microsoft Sentinel, Purple Team (Cyber Security), Blue Team (Cyber Security)
- **Published:** September 25, 2026
- **Apply:** https://www.adzuna.co.uk/jobs/details/5896691550

## About the Role

* Strong experience in senior SOC, blue team, or security operations roles.
 * Hands-on SIEM engineering and detection tuning experience.
 * Proven ownership of complex incident response and investigations.
 * Cloud security experience across Azure and AWS.
 * Experience automating SOC workflows and response processes.
 * Threat hunting experience beyond basic log review.
 * Comfortable engaging directly with technical stakeholders.
 * Able to prioritise and operate effectively under pressure.
 * Microsoft Sentinel experience is useful but not essential.
 * Experience with container or Kubernetes environments is useful but not essential.
 * Exposure to CI/CD security tooling is useful but not essential.
 * Red team or purple team experience is useful but not essential.

## Description

* Lead complex security incidents end to end, including investigation, containment, forensics, and root cause analysis.
 * Design, tune, and improve detections across SIEM and EDR platforms.
 * Conduct proactive threat hunting across cloud infrastructure, applications, and CI/CD environments.
 * Build and maintain automation and response playbooks using SOAR tooling.
 * Work closely with DevOps, infrastructure, and engineering teams to improve security posture and response capability.
 * Reduce alert fatigue, improve logging coverage, and strengthen SOC maturity.
 * Align security operations and incident response practices with industry-recognised frameworks such as ISO 27001.
 * Support audit readiness, documentation, and operational standards.
 * Mentor and support junior analysts where required.

Technologies:

 * AWS
 * Azure
 * CI/CD
 * Cloud
 * DevOps
 * Support
 * Kubernetes
 * Security, We are an international, industry leading software business operating in a modern cloud environment. This is a senior-level Security Operations opportunity with a hybrid working model, and team meetings in our Reading office once a month. We offer a permanent, full-time position with strong investment in tooling and automation, senior ownership and autonomy, and the opportunity to genuinely influence how security operations operate. You will join a passionate and creative team that values your contributions and supports your professional development.


## Related Videos

- [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way)
- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Instant KAI Sandboxes with vCluster: Multi-Tenant, Multi-Scheduler GPU Sharing](https://www.wearedevelopers.com/videos/100333-instant-kai-sandboxes-with-vcluster-multi-tenant-multi-scheduler-gpu-sharing)
- [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)