> Markdown version of [/jobs/ext/64049-senior-security-analyst](https://www.wearedevelopers.com/jobs/ext/64049-senior-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Security Analyst - **Company:** Admiral - **Location:** UK (Remote available) - **Experience:** Expert - **Salary:** £43,200.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Cloud Computing, Cyber Security, Identity and Access Management, Intrusion Detection and Prevention, Machine Learning, Security Information and Event Management, Mitre Att&ck, Cyber Threat Analysis, Cybercrime - **Published:** May 30, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=5e2cc84c78a13062 ## About the Role Do you have experience in SIEM?, Essential * 3+ years' experience as a Senior SOC Analyst within an internal SOC environment * Strong experience in a SOC environment, including handling high-severity incidents. * Deep understanding of attacker tradecraft across endpoint, identity, cloud, and email attack surfaces. * Hands-on experience with SIEM, EDR, and security investigation platforms. * Proven threat hunting experience using dashboards, structured queries, and behavioural analytics. * Experience tuning detections and implementing well-governed exclusions without increasing risk. * Ability to clearly document investigations, decisions, and outcomes. Desirable * Experience using AI or machine-learning features within security products. * Familiarity with SOAR workflows and automation concepts. * Knowledge of detection engineering concepts and use-case lifecycle management. * Experience working in regulated or large-scale enterprise environments. Behaviours & Attributes * Strong analytical mindset * Risk-aware decision making, especially when tuning or excluding detections. * Clear, confident communicator under pressure. * Proactive and curious, with a continuous improvement mentality. * Trusted senior presence within the SOC team. ## Description You will work as part of a 24/7 Global Security Operations Centre. The Senior SOC Analyst plays a critical role in protecting the organisation from cyber threats by leading complex security investigations, proactively hunting for adversary activity and continuously improving detection fidelity. This role acts as a senior escalation point within the SOC, providing investigatory leadership, mentoring analysts, and shaping how investigatory tooling including AI-enabled capabilities is used safely, consistently, and effectively. With seamless collaboration across regions, ensuring continuous security coverage through effective handover. The role requires strong analytical capability, sound security judgement, and the ability to balance quality response with long-term detection and risk reduction. Detection & Response * Act as senior escalation point for complex/high-severity alerts across SIEM, EDR, cloud and identity platforms. * Lead end-to-end incident response (investigation, containment, eradication, and post-incident review). * Correlate alerts with threat intelligence and business context to assess risk and impact. * Produce clear investigation summaries for technical and non-technical stakeholders. * Collaborate closely with Incident Response during escalations. AI-Assisted Investigation & Tooling * Use AI-enabled features across SOC tooling to accelerate analysis and investigations. * Apply strong judgement to validate AI outputs and avoid automation bias. * Provide feedback to improve tooling, workflows, and AI effectiveness. * Support development of safe and consistent AI usage standards within the SOC. Threat Hunting & Proactive Detection * Conduct proactive threat hunting using queries, dashboards and behavioural analytics. * Identify gaps using frameworks (e.g. MITRE ATT&CK) and translate findings into improved detections and playbooks. * Detection Optimisation & Governance * Tune alerts and detections to reduce noise while maintaining coverage. * Validate and manage exclusions with clear risk assessment and documentation. * Work with Detection Engineering to enhance detection logic and alert quality. Collaboration & Mentoring * Mentor analysts and support their development. * Provide leadership during incidents and contribute to continuous SOC improvement. * Collaborate with Security Engineering, Threat Intelligence and Automation teams. Regional Handover * Deliver structured handovers with clear incident status, risks, and next steps. * Ensure continuity and adherence to operational standards across regions. ## Related Videos - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)