5 of 5 Incident Analyst Jobs in the UK

Incident Response (CSIRT)/SOC Level 3 Analyst Location: Crawley (Hybrid) Department: Information Systems Type: Contract | Full-time Outside IR35 About the Role My client is seeking an experienced Incident Response (CSIRT)/Security Operations Centre (SOC) Level 3 Analyst to join their Information Systems directorate, based in Crawley. In this critical role, you'll respond … cyber incidents, ensuring rapid containment and recovery. Conduct advanced threat hunting across IT and OT environments to identify and eliminate hidden threats. Develop and enhance SOC policies, playbooks, and incident response processes to align with industry best practices. Collaborate with the Managed Security Service Provider (MSSP) and internal teams to ensure complete log source integration and effective alert correlation … technical expertise, analytical acumen, and a collaborative approach to problem-solving. Essential Qualifications & Experience Proven experience in a SOC Level 2 or Level 3 role, with demonstrable expertise in incident response and advanced threat hunting. A degree in Computer Science, Cybersecurity, IT, or a related discipline, or equivalent professional experience. Industry-recognised certifications such as CISSP, GIAC/GCIA More ❯

in observability and cybersecurity. We foster a collaborative environment where security professionals can grow, make an impact, and work with modern tooling. We’re recruiting for an experienced SecOps Analyst to support a prestigious multinational client. In this role, you’ll champion a proactive, security-first culture within the SOC. You’ll ensure security events and incidents are automated … Triage alerts, validate incidents, gather context, and escalate according to severity. Investigate threats using network and host-based tools across Windows, macOS, Linux, and Unix environments. Manage the full incident lifecycle: detection, investigation, response, and remediation. Maintain and standardise SOC processes, policies, and runbooks. Research emerging threat vectors, commodity malware, and APT tactics. Provide feedback on detection rules and … to break down technical findings for diverse audiences. Detail-oriented, curious, and creative when tackling unexpected challenges. Your Experience A minimum of 3 years+ as a SOC or SecOps Analyst, with practical incident handling and threat detection experience. Proven ability to optimise detection tools, reduce noise, and drive SOC improvements. Comfortable with shift work and participating in on More ❯

Bonhill Partners are excited to represent our global investment bank as they look to expand their cyber security teams as part of a globalisation initiative. Client: Investment Banking Role: Incident Response Analyst (SOC) Job type: 3 month contract-> convert to perm at VP level Location: London, near Bank. Project snapshot: Experience responding to cybersecurity incidents (triage, containment, eradication … ArcSight) Ability to perform log analysis across network, host, application, and cloud sources Understanding of malware behaviour, attack vectors, and common threat actor techniques Familiarity with MITRE ATT&CK, incident handling frameworks (NIST, SANS) Experience with alert investigation, root-cause analysis, and writing clear incident reports Ability to use EDR tools (CrowdStrike, Carbon Black, SentinelOne etc.) Knowledge of More ❯

Bonhill Partners are excited to represent our global investment bank as they look to expand their cyber security teams as part of a globalisation initiative. Client: Investment Banking Role: Incident Response Analyst (SOC) Job type: 3 month contract-> convert to perm at VP level Location: London, near Bank. Project snapshot: Experience responding to cybersecurity incidents (triage, containment, eradication … ArcSight) Ability to perform log analysis across network, host, application, and cloud sources Understanding of malware behaviour, attack vectors, and common threat actor techniques Familiarity with MITRE ATT&CK, incident handling frameworks (NIST, SANS) Experience with alert investigation, root-cause analysis, and writing clear incident reports Ability to use EDR tools (CrowdStrike, Carbon Black, SentinelOne etc.) Knowledge of More ❯

Looking to move away from retail, hospitality or shift work – and build a career that actually gives you long-term stability and flexibility? Cyber Security is one of the fastest-growing industries in the world, and you don’t need More ❯