L2 SOC Analyst

Band: £32,000 - £45,000 per annum

About the role

As a Security Analyst you will be responsible for identifying, investigating, and responding to security threats and incidents on behalf of our clients. You will proactively monitor and assess security alerts, assist in incident response, and conduct threat-hunting activities. In this role, you will be tasked with creating and tuning detection rules, optimising threat intelligence platforms, and developing dashboards for real-time monitoring. Additionally, you will produce detailed reports to keep clients informed about their security posture and any incidents or vulnerabilities identified.

Your expertise will play a vital part in ensuring the security and resilience of our clients’ environments.

Key responsibilities

  • Triage and investigation of alerts and incidents: Monitor security alerts and conduct initial triage to determine their nature and Perform detailed investigations into potential security incidents and determine the best course of action.
  • Threat hunting: Perform guided threat hunting in search for indicators of compromise (IOCs) and undetected threats within client systems, leveraging advanced threat intelligence and and tools.
  • Dashboard creation: Design and implement dashboards for real-time monitoring of security metrics and key performance indicators (KPls), providing valuable insights to both internal teams and clients.
  • Detection rule creation and tuning: Develop, optimise, and fine-tune detection rules to enhance the identification of malicious activity and reduce false positives.
  • Tuning of threat intelligence platform: Maintain and enhance the threat intelligence platform to ensure it provides actionable insights. Integrate threatfeeds and update rules to align with the evolving threat landscape.
  • Producing reports for clients: Create detailed reports for clients on security posture, incidents, threat hunting findings, and overall performance. Present findings in a clear, concise manner, tailored to both technical and non-technical stakeholders.

 

What we're looking for

Essential Skills
  • Experience triaging and investigating security alerts and incidents using SIEM platforms.
  • Experience with vulnerability management.
  • Understanding of security concepts like incident triage, investigation, and mitigation strategies.
  • Understanding of threat hunting techniques and able to understand returned data from guided hunts.
  • Detail-oriented with the ability to prioritise and respond to multiple security alerts effectively.
  • Excellent communication skills to collaborate with the Incident Response team and external stakeholders.
  • Analytical mindset for continuous improvement of detection rules and reducing false positives.
  • Relevant qualifications in cyber security (e.g., CompTIA Security+, Network+, ISC2 CC).

 

Desirable Skills
  • Experience in creation of dashboards to display security data
  • Proven experience in analysing and responding to security threats in a SOC environment.
  • Experience with Rapid7 Insight platform
  • Ability to proactively perform threat hunting and identify IOCs across client environments.
  • Keen interest in security industry and staying up to date with the latest TTP’s in use and changes to the landscape.
  • Subscriber to hackthebox/tryhackme or alternative. Demonstratable drive to improve security knowledge.
  • ISC2 SSCP, CCSP or equivalent
Role at a glance
Salary
Band: £32,000 - £45,000 per annum
Type
Full Time
Location
Remote (UK)
Closing date
Remote (UK)

Apply for this role

Practical expertise that delivers measurable improvements – not just recommendations.

Accepted file types are: pdf, doc, docx.