> Markdown version of [/jobs/ext/3944987-security-analyst-iii-soc](https://www.wearedevelopers.com/jobs/ext/3944987-security-analyst-iii-soc). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Analyst III - SOC

- **Company:** Tesco PLC
- **Location:** Welwyn Garden City, UK (Remote available)
- **Experience:** Experienced
- **Salary:** £73,126.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Data Analysis, Application Integration Architecture, Intrusion Detection and Prevention, Kusto Query Language, Security Information and Event Management, Scripting, Mitre Att&ck, Cyber Threat Analysis, Pyramid
- **Published:** October 27, 2026
- **Apply:** https://www.adzuna.co.uk/jobs/details/5942722777

## About the Role

* Over 2 years' experience working in an internal SOC or 3 years at an MSSP in a senior role.
 * Deep knowledge of cybersecurity frameworks: MITRE ATT&CK, Cyber Kill Chain, Incident Response Lifecycle, Pyramid of Pain.
 * Expertise in threat hunting and advanced investigative analysis.
 * Deep understanding of attacker tactics, techniques, and procedures (TTPs) and threat actor behaviours.
 * Proficiency in SIEM/XDR platforms and tuning detection logic, use cases, and alert optimisation.
 * Advanced querying and scripting skills (e.g., KQL, SPL) for data analysis and threat detection.
 * Ability to recommend tooling enhancements and process improvements to strengthen SOC capability.
 * Practical knowledge of networks, operating systems, and scripting for investigative purposes.
 * Experience in leading technical initiatives and driving service maturity improvements.
 * Demonstrated ability to coach and develop team members, fostering technical excellence.

Desirable

 * GIAC certifications
 * Other relevant certifications such as CISSP or CISM will be considered.
 * A relevant degree, with professional experience.

## Description

As a Security Analyst III, you will be the technical authority within the SOC, leading high-quality investigations and proactive threat hunting to protect the organisation from evolving threats. This hands-on role combines advanced technical expertise with leadership, coaching analysts, driving SOC maturity, and optimising tools and processes to set the standard for excellence across the team.

You will act as a role model for SOC Analysts, coaching and guiding them to elevate technical capability and analytical rigour. Beyond day-to-day operations, you will lead maturity objectives, optimise SOC tooling, and identify opportunities for automation, AI integration, and impactful service improvements. You will also play a key role within the CSIRT team, collaborating on major incidents.

 * Deliver high-quality investigative analysis to ensure rapid and accurate incident resolution.
 * Act as the escalation point and technical authority for complex SOC investigations.
 * Lead proactive threat-hunting initiatives to identify and mitigate emerging threats before they impact the business.
 * Role-model analytical excellence and decision-making, setting the benchmark for SOC performance.
 * Coach and mentor analysts to build technical depth and confidence across the team.
 * Drive SOC maturity objectives, improving processes, tooling, and automation for greater efficiency.
 * Enhance SOC tool utilisation, including workflow optimisation.
 * Identify and implement automation, AI-driven enhancements, and playbook developments.
 * Support CSIRT activities during major incidents, ensuring coordinated and effective response.
 * Monitor MSSP performance, ensuring alert triage and investigations meet quality and timeliness standards.