> Markdown version of [/jobs/ext/99353-cyber-security-analyst-2nd-line](https://www.wearedevelopers.com/jobs/ext/99353-cyber-security-analyst-2nd-line). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Security Analyst (2nd Line)

- **Company:** SEP2
- **Location:** Leeds, UK
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Cloud Engineering, Cyber Security, Linux, Intrusion Detection and Prevention, Security Information and Event Management, Zabbix
- **Published:** May 21, 2026
- **Apply:** https://uk.indeed.com/viewjob?jk=7f0541292a42ff20

## About the Role

Do you have experience in Windows?, * Self-motivation to learn, improve and keep up to date with technologies and concepts within the security industry.

 * A "can-do" attitude.
 * The drive to perform and excel, proactively.
 * Be excited about technology and a desire to advance your career in Cyber Security
 * Act as a mentor/leader for other SOC Analysts., * At least 3+ years of experience in a SOC Analyst position or similar.
 * Specialised in at least a single discipline within SecOps e.g. Detection Engineering, Incident Response, Cloud Engineering.
 * Successful completion of a mid-level product-specific certification (e.g CySA+, BTL1 / BTL2, SAL1 / SAL2, eCTHP etc).
 * Strong understanding and experience of networks / networking.
 * Good understanding of Linux and Windows operating systems.
 * Excellent written and verbal communication skills.

## Description

Primary Function: Working within the SOC, acting as a point of contact for SEP2 customers, providing them with excellent customer services and immediate response to incidents. You will also be a point of escalation for the team on shift before having to escalate to other technical teams.

Main Tasks:

 * Provide technical assistance and support to customers with a range of Cyber Security Solutions.
 * Work with the SOC to manage Cyber Security Solutions defending customer infrastructure from exploitation and cyber-attacks.
 * Respond to ongoing Cyber Security incidents detected by our monitoring solutions.
 * Using tools such as Google SecOps SOAR / SIEM, Zabbix, Check Point, CrowdStrike and Google to assess and advise on security incidents to customers.
 * Build out custom detection rules for the SOC to run through agentic processes.
 * build out custom workflows to increase the efficacy of context and reduce monotonous tasks for analysts.
 * Build out and analyse reporting metrics to identify opportunities for new areas of proactive threat hunting and tailor detection engineering to specific industries.
 * leverage google threat intelligence and Wiz to build out processes for identifying and remediating threats at machine speed with the tooling available.
 * Escalating security incidents and acting as an escalation point, too ensuring high quality and insightful recommendations are made as appropriate.
 * Carry out the pre-defined handover process to other shifts.
 * Carry out Incident Response actions swiftly, ensuring containment actions occur for any malicious indicators within security incidents.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker)

## Related Articles

- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)
- [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk)