L3 SOC Analyst - Incident Response

An opportunity for an experienced Incident Response Analyst (SOC L3) to support a financial services organisation in London.

Taking a senior technical role within the SOC, you’ll investigate complex security incidents and support their containment and resolution.

This role would suit a hands-on analyst who can take ownership of escalated threats, communicate findings clearly and help strengthen incident response capabilities.

What’s on offer

£650–£700 per day – Inside IR35

Initial 6-month contract with potential extension.

Hybrid working – 3 days on-site in London.

ASAP start.

Opportunity to tackle complex security incidents within a financial services environment.

What you need

• Proven experience operating at L3 within a SOC, with a strong focus on incident response.
• Experience managing escalated security incidents, from investigation and triage through to containment, eradication and recovery.
• Strong technical investigation skills across endpoint, network and identity-related threats.
• Hands-on experience using SIEM and EDR tools to analyse alerts, correlate evidence and establish incident scope.
• Ability to identify root causes and translate findings into practical remediation recommendations.
• Clear communication skills, including documenting investigations and keeping technical and business stakeholders informed.
• Ability to support junior analysts and contribute to improvements in detection rules, response playbooks and SOC processes.
• Previous experience in financial services or another regulated environment would be advantageous.