L3 SOC Analyst

This role will suit someone with a strong background in incident response, threat detection, investigation and remediation, who is comfortable operating as a senior escalation point within a Security Operations Centre. What You’ll Be Doing:

• Acting as an L3 escalation point for complex security incidents and investigations
• Leading incident response activities from detection through to containment and remediation
• Conducting in-depth analysis of security alerts, events and threat intelligence
• Supporting and optimising SIEM use cases and detection engineering activities
• Performing threat hunting activities across enterprise environments
• Investigating suspicious activity across cloud, endpoint and network technologies
• Producing detailed incident reports and recommending improvements to security controls
• Collaborating with engineering, infrastructure and security teams to strengthen security posture

• Proven experience operating as an L3 SOC Analyst
• Strong hands-on experience with Microsoft Sentinel
• Excellent Incident Response experience within enterprise environments
• Experience investigating advanced threats, malware, phishing and compromise activity
• Strong knowledge of SIEM technologies, log analysis and threat detection
• Experience with threat hunting and security investigations
• Understanding of MITRE ATT&CK, cyber kill chain methodologies and security best practices
• Ability to operate effectively in high-pressure environments and manage multiple incidents simultaneously

Desirable Skills

• Experience with Microsoft Defender technologies
• Knowledge of KQL and detection rule development
• Previous experience within highly regulated or large enterprise environments
• Relevant cyber security certifications (SC-200, GCIA, GCIH, CISSP, Security+, etc.), If you’re an experienced L3 SOC Analyst with strong Microsoft Sentinel and Incident Response expertise and are available to start at short notice, we’d be keen to hear from you.