Job Search

We are seeking an experienced Senior SOC Analyst to strengthen a security operations function and help protect critical systems, applications, networks, and data. In this role, you will monitor and investigate security events, lead the response to complex incidents, and provide expert guidance to analysts across the team. You will work closely with infrastructure, cloud, application, and risk teams to identify threats, reduce exposure, and improve the organisation’s overall security posture.

Your responsibilities will include triaging and analysing alerts from SIEM, EDR, network monitoring, identity, and cloud security platforms; conducting in-depth investigations using log analysis, threat intelligence, and forensic techniques; and coordinating containment, eradication, and recovery activities. You will develop and refine detection rules, playbooks, and response procedures, contribute to threat-hunting initiatives, and identify opportunities to improve monitoring coverage and automation. The role will also involve documenting incidents, producing clear technical reports, supporting post-incident reviews, and communicating risks and recommendations to both technical and non-technical stakeholders. You may also mentor junior analysts and help maintain effective shift handovers and operational standards.

The successful candidate will have substantial experience in a security operations or incident response environment, with a strong understanding of security monitoring, threat detection, and investigation methodologies. You should be confident working with SIEM and endpoint detection platforms, interpreting network and system logs, and responding to threats such as malware, phishing, credential compromise, ransomware, and unauthorised access. Knowledge of cloud security, identity and access management, vulnerability management, and common frameworks such as MITRE ATT&CK and the Cyber Kill Chain is highly desirable. Relevant certifications such as GCIA, GCIH, GCFA, CISSP, or equivalent experience would be advantageous. Strong analytical, written, and verbal communication skills are essential, along with the ability to remain calm, prioritise effectively, and make sound decisions during high-pressure incidents.

We are seeking a Senior Cyber Threat Intelligence Analyst to support a global security operations function in identifying, assessing and responding to emerging cyber threats. The successful candidate will turn complex intelligence from internal, open-source and trusted industry sources into clear, actionable insight for security teams and business stakeholders. This role will help strengthen detection, prevention and response capabilities across a varied technology environment.

Responsibilities will include monitoring the threat landscape for relevant actors, campaigns, vulnerabilities and tactics; producing timely intelligence reports, briefings and alerts; and conducting strategic, operational and tactical analysis. You will develop and maintain threat profiles, indicators of compromise, attack-path assessments and intelligence requirements. Working closely with incident response, security monitoring, vulnerability management and engineering teams, you will support investigations, improve detection content and help prioritise remediation activity. You will also contribute to threat hunting, tabletop exercises, intelligence-led risk assessments and the continuous improvement of analytical processes and reporting standards.

Applicants should have substantial experience in cyber threat intelligence, security operations, incident response or a closely related discipline, together with a strong understanding of the cyber kill chain, MITRE ATT&CK and common intrusion techniques. Practical experience analysing malware or forensic data, enriching indicators, using threat intelligence platforms and querying security data is highly desirable. You should be confident evaluating source reliability, distinguishing meaningful risk from background noise and communicating complex findings to both technical and non-technical audiences. Strong written and verbal communication, sound judgement, curiosity and the ability to work calmly in a fast-paced, collaborative environment are essential. Relevant professional certifications or formal training in cyber security, intelligence analysis or digital forensics would be advantageous.

We are seeking a Senior Security Analyst (L3 SOC Analyst) to provide advanced security monitoring, investigation, and incident response within a fast-paced Security Operations Centre. In this role, you will act as a senior escalation point for complex and high-impact security events, helping to protect critical systems, applications, networks, and data. You will investigate sophisticated threats, determine root cause, assess business impact, and coordinate appropriate containment and remediation activities.

Your responsibilities will include analysing alerts and telemetry from SIEM, EDR, network security, identity, cloud, and vulnerability management platforms; leading investigations into suspected compromise, malware, insider threats, credential abuse, and data exfiltration; and developing detailed incident timelines and technical reports. You will validate detection logic, improve correlation rules and use cases, support threat hunting, and contribute to the development and maintenance of playbooks and response procedures. You will also mentor junior analysts, provide guidance on complex investigations, participate in incident reviews, and work closely with infrastructure, engineering, risk, and compliance teams to strengthen the organisation’s security posture.

The successful candidate will have substantial experience in a SOC, incident response, digital forensics, threat detection, or a closely related security function, with proven capability operating at an L3 or senior level. You should have strong knowledge of security monitoring principles, attack frameworks such as MITRE ATT&CK, common exploitation techniques, and investigative methods across endpoint, network, cloud, and identity environments. Experience with SIEM and EDR technologies, scripting or automation using tools such as Python or PowerShell, and security operations in cloud platforms is highly desirable. Excellent analytical, written, and verbal communication skills are essential, along with the ability to remain calm under pressure, manage competing priorities, and make sound decisions during critical incidents. Relevant certifications such as GIAC, CISSP, or equivalent professional experience would be advantageous.

We are seeking an experienced Acquisition Cybersecurity Operations (ACO) – Senior SOC Analyst to support the protection, monitoring and continuous improvement of complex digital environments. In this role, you will act as a senior member of a security operations function, providing expert analysis of security events, coordinating incident response activities and helping maintain effective operational security across enterprise systems, networks and cloud services.

Your responsibilities will include monitoring and triaging alerts from SIEM, endpoint detection and response, network security and vulnerability management platforms; investigating suspected compromises; correlating events across multiple data sources; and determining the severity, scope and potential impact of incidents. You will lead or support incident response investigations, develop clear technical reports, preserve evidence and recommend containment, eradication and recovery actions. The role will also involve threat hunting, security control validation, malware or artefact analysis, development of detection use cases, and tuning monitoring rules to reduce false positives and improve detection capability. You will contribute to playbooks, standard operating procedures, operational metrics and lessons-learned reviews, while collaborating with infrastructure, engineering, risk, compliance and programme teams.

Applicants should have substantial experience in a security operations centre or equivalent cyber defence environment, with a strong understanding of incident handling, threat intelligence, vulnerability management and security monitoring principles. Practical experience with SIEM and EDR technologies, log analysis, network and host-based investigation, cloud security controls and common attack techniques is essential. Familiarity with recognised frameworks such as MITRE ATT&CK, NIST or ISO 27001 will be advantageous. The successful candidate will demonstrate sound judgement under pressure, excellent written and verbal communication skills, and the ability to explain technical findings to both specialist and non-specialist audiences. Relevant professional certifications or equivalent demonstrable experience are desirable.

We are seeking a Senior SOC Analyst to join a security operations team based in Manchester. This is an opportunity to play a leading role in protecting critical systems, applications and data from evolving cyber threats. You will monitor and investigate security events, assess potential incidents and coordinate effective responses across a range of technical environments. The successful candidate will bring strong analytical skills, sound judgement and the confidence to take ownership of complex investigations.

Responsibilities will include triaging and escalating alerts from SIEM, EDR, network monitoring and threat intelligence platforms; investigating suspicious activity across endpoints, networks, cloud services and identity systems; and carrying out detailed analysis of logs, malware indicators and attack techniques. You will lead or support incident response activities, contain threats, document findings and contribute to post-incident reviews. The role will also involve developing and refining detection rules, improving playbooks, identifying opportunities to reduce false positives and producing clear operational and management reports. You may be required to participate in an out-of-hours on-call or shift rota.

Applicants should have substantial experience in a SOC, incident response or cyber defence environment, together with a strong understanding of security monitoring principles and the MITRE ATT&CK framework. Practical experience with SIEM technologies, endpoint detection and response tools, vulnerability information, threat intelligence and network protocols is essential. Knowledge of cloud security, identity and access management, scripting or automation would be advantageous. Relevant certifications such as Security+, CySA+, GCIH, GCIA or equivalent experience are desirable. You should be able to communicate technical findings clearly to both technical and non-technical audiences, work effectively under pressure and demonstrate a proactive approach to continuous improvement. This role is suited to an experienced security professional who can mentor colleagues, challenge existing processes and help strengthen organisational resilience.

We are seeking a Senior Associate, Cyber Security Analyst – Incident Response to join a dedicated security operations function. In this role, you will help protect critical systems, data and services by leading the investigation and response to cyber security incidents. You will work closely with technology, risk, infrastructure and business teams to identify threats, contain activity, recover affected environments and strengthen the organisation’s overall security posture.

Key responsibilities include monitoring and analysing security alerts, endpoint activity, network traffic, identity events and other indicators of compromise. You will triage incidents, determine scope and severity, coordinate containment and eradication activities, and provide clear updates to technical and senior stakeholders. The role will also involve conducting forensic analysis, preserving evidence, developing incident timelines, supporting root-cause investigations and preparing accurate post-incident reports. You will contribute to incident response playbooks, tabletop exercises, threat hunting, detection engineering and continuous improvements to security monitoring and response processes. Where required, you may support major incident management and coordinate with external specialists, regulators or law enforcement.

The successful candidate will have substantial experience in cyber security operations, incident response, digital forensics or a closely related discipline, ideally within a complex enterprise environment. You should be confident investigating sophisticated threats and using security tools such as SIEM, EDR, vulnerability management, identity monitoring and threat intelligence platforms. Strong knowledge of attack techniques, malware behaviour, network and cloud security, authentication technologies and relevant security frameworks is essential. Experience with scripting or automation, particularly using Python, PowerShell or similar tools, would be advantageous. Professional qualifications such as CISSP, GIAC, GCIH, GCFA or equivalent are desirable. You will bring sound judgement, excellent communication skills, strong attention to detail and the ability to remain calm and effective during high-pressure incidents.

We are seeking a Senior SOC Analyst – Incident Response to lead the investigation, containment and resolution of complex cybersecurity incidents across a diverse technology environment. You will act as a senior escalation point within the Security Operations Centre, providing expert analysis during high-impact events and helping to protect critical systems, data and services. The role will involve working closely with infrastructure, cloud, engineering, risk and business teams to coordinate effective responses and minimise operational disruption.

Your responsibilities will include monitoring and triaging alerts from SIEM, EDR, network, identity and cloud security platforms; conducting in-depth analysis of logs, endpoint activity, network traffic and threat intelligence; and determining the scope, impact and root cause of suspected incidents. You will lead or support incident response activities from initial detection through containment, eradication and recovery, while maintaining clear, accurate documentation. You will also develop incident timelines, produce technical and executive-level reports, contribute to post-incident reviews and recommend improvements to controls, processes and detection capabilities. Additional duties may include threat hunting, malware or forensic investigations, playbook development, detection engineering and mentoring junior analysts.

Applicants should have substantial experience in a security operations or incident response role, with a strong understanding of attack techniques, defensive security principles and incident management frameworks. Hands-on experience with SIEM, EDR, vulnerability, identity and cloud security technologies is essential, along with the ability to analyse data using query languages and scripting tools such as Python or PowerShell. Professional certifications in incident response, digital forensics, security operations or related disciplines are desirable. You should be confident making decisions under pressure, communicating clearly with both technical and non-technical stakeholders, and working effectively as part of an on-call or out-of-hours response rota. A methodical approach, strong investigative skills and a commitment to continuous learning are key to success in this position.

We are seeking a Senior SOC Analyst – Incident Response to lead the investigation, containment, and resolution of complex cybersecurity incidents. You will operate as a senior member of a security operations team, providing expert guidance during active incidents and helping protect critical systems, applications, and data. The role requires strong analytical thinking, sound technical judgement, and the ability to remain calm and decisive in a fast-moving environment.

Responsibilities include monitoring and triaging security alerts, investigating suspected compromises, conducting threat hunting, and coordinating end-to-end incident response activities. You will analyse events from SIEM, EDR, network, identity, cloud, and other security platforms; identify indicators of compromise; determine root cause and scope; and recommend effective containment and remediation actions. You will create and maintain incident response procedures, playbooks, investigation notes, and post-incident reports. The successful candidate will also support forensic analysis, vulnerability investigations, threat intelligence integration, detection engineering, and the continuous improvement of SOC processes. You may be required to participate in an on-call rota and provide clear updates to technical and non-technical stakeholders during significant incidents.

Applicants should have substantial experience in a SOC, incident response, digital forensics, or a closely related cybersecurity function, together with proven experience handling high-severity incidents. Strong knowledge of attack tactics, techniques, and procedures, including common enterprise, cloud, identity, endpoint, and network threats, is essential. Experience with SIEM and EDR technologies, log analysis, scripting, and investigation frameworks such as MITRE ATT&CK is highly desirable. Relevant certifications such as GCIH, GCIA, GCFA, CISSP, or equivalent practical experience are welcomed. You should be an excellent communicator, capable of producing accurate technical documentation and collaborating effectively across security, infrastructure, applications, and risk teams. A proactive approach to learning, automation, and improving defensive capabilities will be important in this role.

We are seeking a Senior SOC Analyst – Incident Response to lead the investigation, containment, and resolution of complex cybersecurity incidents. In this role, you will act as a senior point of escalation within the Security Operations Centre, providing expert analysis and guidance during high-impact events. You will monitor and investigate alerts across endpoint, network, cloud, identity, and application environments, using SIEM, EDR, threat intelligence, and other security technologies to identify malicious activity and assess business risk.

You will coordinate incident response activities from initial triage through eradication, recovery, and post-incident review. Responsibilities include developing and refining detection rules, conducting forensic analysis, identifying attack vectors and indicators of compromise, and maintaining accurate incident documentation. You will contribute to threat hunting and proactive investigations, support vulnerability and exposure assessments, and help improve playbooks, response procedures, and operational processes. The role also involves collaborating with infrastructure, engineering, risk, and business teams, communicating technical findings clearly, and providing timely updates to stakeholders during critical incidents. You may also mentor junior analysts and support the development of their technical capabilities.

Applicants should have substantial experience in a SOC, incident response, digital forensics, or a closely related security operations environment. Strong knowledge of common attack techniques, the MITRE ATT&CK framework, incident lifecycle management, networking, operating systems, identity services, and cloud security is essential. Practical experience with SIEM and EDR platforms, log analysis, scripting, and investigative tooling is expected. Relevant professional certifications in cybersecurity, incident response, or digital forensics are desirable. You will need excellent analytical and problem-solving skills, sound judgement under pressure, and the ability to prioritise multiple incidents. Strong written and verbal communication, a methodical approach, and a commitment to continuous learning are also required. This position may include participation in an on-call or out-of-hours incident response rota.

We are seeking a Senior SOC Analyst – Incident Response to lead the investigation, containment and resolution of complex cybersecurity incidents. In this role, you will act as a senior escalation point within the security operations function, coordinating response activities across technical teams and providing clear, timely updates to relevant stakeholders. You will analyse alerts and events from SIEM, EDR, network security and cloud platforms, identify indicators of compromise, determine root cause and assess the scope and impact of incidents.

Your responsibilities will include developing and executing incident response procedures, conducting forensic investigations, performing threat hunting and supporting malware and endpoint analysis. You will help improve detection and response capabilities by tuning security rules, creating use cases, refining playbooks and documenting lessons learned. The role will also involve coordinating containment, eradication and recovery actions, maintaining accurate incident records, and contributing to post-incident reviews. You may support security exercises, vulnerability investigations, threat intelligence assessments and the development of operational metrics and reports. As a senior team member, you will mentor junior analysts and promote consistent, high-quality working practices.

Applicants should have substantial experience in a security operations or incident response environment, with a strong understanding of attack techniques, threat modelling and the incident lifecycle. Practical expertise with SIEM, EDR, network monitoring, identity platforms and cloud security technologies is required, along with the ability to investigate suspicious activity using logs, telemetry and forensic evidence. Familiarity with frameworks such as MITRE ATT&CK, NIST or ISO 27001 is desirable. Relevant certifications, such as GIAC, CISSP, CREST or equivalent, are advantageous. You should be an analytical and confident communicator who can remain calm during high-pressure incidents, explain technical findings to varied audiences and work collaboratively across teams. Participation in an out-of-hours on-call or incident escalation rota may be required.