What You'll Be Doing
Acting as an L3 escalation point for complex security incidents and investigations
Leading incident response activities from detection through to containment and remediation
Conducting in-depth analysis of security alerts, events and threat intelligence
Supporting and optimising SIEM use cases and detection engineering activities
Performing threat hunting activities across enterprise environments
Investigating suspicious activity across cloud, endpoint and network technologies
Producing detailed incident reports and recommending improvements to security controls
Collaborating with engineering, infrastructure and security teams to strengthen security posture
What We're Looking For
Proven experience operating as an L3 SOC Analyst
Strong hands-on experience with Microsoft Sentinel
Excellent Incident Response experience within enterprise environments
Experience investigating advanced threats, malware, phishing and compromise activity
Strong knowledge of SIEM technologies, log analysis and threat detection
Experience with threat hunting and security investigations
Understanding of MITRE ATT&CK, cyber kill chain methodologies and security best practices
Ability to operate effectively in high-pressure environments and manage multiple incidents simultaneously
Desirable Skills
Experience with Microsoft Defender technologies
Knowledge of KQL and detection rule development
Previous experience within highly regulated or large enterprise environments
Relevant cyber security certifications (SC-200, GCIA, GCIH, CISSP, Security+, etc.)
Contract Details
Inside IR35
Up to £675 per day
Hybrid working - 2 days per week in London
ASAP Start
Initial contract until May 2027, possibility of extension