Senior Security Analyst

As a Senior Security Analyst, you’ll lead the response to complex cyber security threats, acting as the highest technical escalation point within our SOC. You’ll investigate and contain incidents, hunt for emerging threats, enhance detection capabilities, and help strengthen customer security across SIEM, SOAR, EDR/XDR, cloud and identity platforms. You’ll also contribute to automation, playbook development, service improvements and the growth of the wider SOC team, while participating in an on-call rota with additional allowances and overtime where applicable.

What will I be doing?

Security Monitoring & Incident Response

Lead major incident investigations, response and customer communications.

Analyse and remediate threats across SIEM, EDR/XDR, cloud and identity platforms.

Produce incident reports, root cause analysis and response recommendations.

Threat Hunting & Intelligence

Proactively hunt for threats and investigate emerging attack techniques.

Leverage threat intelligence to improve detection and response capabilities.

Enhance coverage aligned to the MITRE ATT&CK framework.

Detection Engineering & Automation

Develop and optimise detections, analytics and SOAR playbooks.

Improve alert quality, monitoring visibility and response automation.

Support onboarding of new security tools and log sources.

Technical Leadership

Act as the senior escalation point for SOC analysts.

Mentor junior team members and uphold investigation quality.

Contribute to training, documentation and continuous improvement.

Customer Engagement

Provide technical expertise during customer incidents and reviews.

Deliver security findings, recommendations and service guidance.

Support customer onboarding and ongoing security optimisation.

Operational Excellence

Maintain compliance with SLAs, processes and documentation standards.

Support audits, service development and continuous improvement initiatives.

Strong knowledge of modern security operations, threat detection and incident response.

Experience with SIEM, SOAR, EDR/XDR, cloud and identity security platforms.

Understanding of threat intelligence, threat hunting, MITRE ATT&CK and detection engineering.

Familiarity with Windows, networking, cloud security, vulnerability management and KQL.

Experience

Experience within a SOC, MDR, MSSP or cyber security operations environment.

Proven ability to investigate high-severity security incidents.

Hands-on experience with SIEM, EDR and customer-facing incident response.

Comfortable producing technical reports and mentoring junior analysts.

Desirable Technical Skills

PowerShell and Python scripting.

API integrations and security automation.

Detection engineering and content development.

SOAR playbook creation and optimisation.