> Markdown version of [/jobs/ext/87363-soc-analyst](https://www.wearedevelopers.com/jobs/ext/87363-soc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# SOC Analyst

- **Company:** Mti
- **Location:** London, UK
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** CompTIA Security+, Cyber Security, Computer Networks, Kusto Query Language, Security Information and Event Management, EndPointSecurity, Mitre Att&ck, Malware, Cyber Threat Analysis, Cybercrime, Microsoft Sentinel
- **Published:** May 28, 2026
- **Apply:** https://www.apply4u.co.uk/jobs/x/37607821/

## About the Role

Required Skills and QualificationsHands-on experience with Microsoft Sentinel, Defender for Endpoint, and other XDR platforms.Strong proficiency in KQL for threat hunting and detection tuning.Solid understanding of the MITRE ATT&CK framework and common threat actor behaviours.Preferred - Microsoft Certified: Security Operations Analyst Associate (SC-200)Preferred - CompTIA Security+, CySA+
Required ExperienceMinimum of 2 years of experience in a SOC environment.Experience working in an MSSP/MSP setting supporting multiple clients.
Required Soft SkillsStrong communicator and collaborator.Comfortable working in fast-paced, dynamic environments.Desire to learn and grow in the cybersecurity field.

## Description

Job SummaryAs a Level 2 SOC Analyst, you will play a key role in the detection and response lifecycle within our Security Operations Centre. You will be responsible for triaging, investigating, and responding to cybersecurity incidents across customer environments using tools such as Microsoft Sentinel and Defender XDR. The role requires strong analytical skills, attention to detail, and the ability to execute response actions such as endpoint isolation, IOC blocking, malware scans, and user containment.Note: Experience working in an MSSP/MSP setting supporting multiple clients is essential

Key Responsibilities Threat Monitoring and Detection:Monitor security alerts and events from SIEM platforms, EDR solutions, and other security tools.Analyse logs, network traffic, and endpoint data to identify potential security incidents.Tune and optimize detection rules to reduce false positives and improve threat detection accuracy.
Threat Intelligence and Hunting:Leverage threat intelligence feeds and platforms to stay informed about emerging threats and attack techniques.Proactively hunt for threats and anomalies within client environments using advanced tools and techniques.Develop and share actionable threat intelligence with clients and internal teams.
SOAR and Automation:Create/update SOAR workflows for common incidents.Recommend automation improvements.
Platform Administration:Maintain and fine-tune Sentinel and Defender components.Ensure consistent log ingestion and rule coverage.


## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes)
- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Full Spectrum File Uploads](https://www.wearedevelopers.com/videos/870-full-spectrum-file-uploads)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)