> Markdown version of [/jobs/ext/3901677-soc-analyst](https://www.wearedevelopers.com/jobs/ext/3901677-soc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# SOC Analyst

- **Company:** THE OPPORTUNITY HUB UK LTD
- **Location:** Manchester, UK
- **Experience:** Expert
- **Salary:** £50,500.0 - £60,500.0
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Log Analysis, Security Information and Event Management, Mitre Att&ck
- **Published:** October 24, 2026
- **Apply:** https://www.jobs.service.gov.uk/jobs/6adb0b2efc1374228e980924/apply

## About the Role

Several years' hands-on SOC experience, ideally with exposure to both detection and incident response

Strong working knowledge of SIEM platforms, EDR tooling and log analysis

Familiarity with MITRE ATT&CK and how to apply it practically, not just cite it in a report

Comfort working independently and making judgement calls under pressure, without waiting for sign-off on every step

Clear written and verbal communication. You'll need to explain technical findings to people who aren't technical

A relevant certification (SC-200, GCIH, or similar) is useful but a proven track record matters more

## Description

An exceptional opportunity for a mid-level Senior SOC Analyst to shape the future of Cybersecurity in Manchester.

Threat actors don't clock off, and neither does the team defending against them. This growing cybersecurity startup, based in Manchester, is building out its security operations function from the ground up, and it needs someone who's seen enough incidents to know the difference between noise and a genuine breach. You'd be joining a small, sharp team where your decisions on triage carry real weight from day one. No layers of bureaucracy standing between you and the fix.

Here's what you'll be doing:

Monitor, investigate and triage security alerts across the SIEM, escalating genuine threats and closing down false positives fast

Lead incident response for confirmed security events, from initial detection through to containment and post-incident review

Tune detection rules and correlation logic so the SOC gets sharper with every incident, not just busier

Mentor junior analysts on investigation technique and help shape how the team's processes evolve as headcount grows

Produce clear, timely reporting for stakeholders who need to understand risk without wading through raw logs

Contribute to threat hunting exercises, digging into anomalies before they become tickets