> Markdown version of [/jobs/ext/4534914-l3-soc-analyst](https://www.wearedevelopers.com/jobs/ext/4534914-l3-soc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# L3 SOC Analyst

- **Company:** Anson McCade
- **Location:** London, UK
- **Salary:** £175,500.0
- **Contract:** Temporary to permanent
- **Skills:** Cyber Security, Intrusion Detection and Prevention, Log Analysis, Anti-Phishing, Kusto Query Language, Security Information and Event Management, Mitre Att&ck, Malware, Cybercrime, Microsoft Sentinel
- **Published:** November 3, 2026
- **Apply:** https://www.totaljobs.com/job/information-security-analyst/anson-mccade-job108272545

## About the Role

* Proven experience operating as an L3 SOC Analyst
 * Strong hands-on experience with Microsoft Sentinel
 * Excellent Incident Response experience within enterprise environments
 * Experience investigating advanced threats, malware, phishing and compromise activity
 * Strong knowledge of SIEM technologies, log analysis and threat detection
 * Experience with threat hunting and security investigations
 * Understanding of MITRE ATT&CK, cyber kill chain methodologies and security best practices
 * Ability to operate effectively in high-pressure environments and manage multiple incidents simultaneously

Desirable Skills

 * Experience with Microsoft Defender technologies
 * Knowledge of KQL and detection rule development
 * Previous experience within highly regulated or large enterprise environments
 * Relevant cyber security certifications (SC-200, GCIA, GCIH, CISSP, Security+, etc.), If you're an experienced L3 SOC Analyst with strong Microsoft Sentinel and Incident Response expertise and are available to start at short notice, we'd be keen to hear from you.

## Description

This role will suit someone with a strong background in incident response, threat detection, investigation and remediation, who is comfortable operating as a senior escalation point within a Security Operations Centre.
What You'll Be Doing:

 * Acting as an L3 escalation point for complex security incidents and investigations
 * Leading incident response activities from detection through to containment and remediation
 * Conducting in-depth analysis of security alerts, events and threat intelligence
 * Supporting and optimising SIEM use cases and detection engineering activities
 * Performing threat hunting activities across enterprise environments
 * Investigating suspicious activity across cloud, endpoint and network technologies
 * Producing detailed incident reports and recommending improvements to security controls
 * Collaborating with engineering, infrastructure and security teams to strengthen security posture