Job Description: CyberThreat Analyst Roles and Responsibilities Tier 2 Analyst You must hold a UK passport only due to the security clearance; we can only accept single national status (2nd passport holders, OCI & ILR candidates can't be accepted) and you must have been in the … experience in SIEM technologies. Job Description The Tier 2 Cyber Security Analyst is a mid-Tier position within the CyberThreat Analysis Centre (CTAC), responsible for advancing the initial work conducted by Tier 1 Analysts and providing more in-depth analysis of potential threats to … Analyst works closely with senior and junior analysts to ensure a seamless SOC operation and acts as a bridge between foundational and advanced threat detection and response functions. Responsibilities: Conduct escalated triage and analysis on security events identified by Tier 1 Analysts, determining threat severity and advising on More ❯
Senior Security Operations Centre Analyst with a strong background in security operations, threat detection, and incident response is required by Logic Engagements to work for a large scale leading organisation based in Gosport, Hampshire As a Senior SOC Analyst, you will be at the forefront of digital defence-leading … using advanced SIEM platforms (Microsoft Sentinel, Splunk) Leading incident response and driving improvements in detection and containment strategies Tuning and maintaining detection rules, using threat frameworks like Mitre Att&ck Collaborating with colleagues to enhance the overall capability and resilience of the Security Operations Centre Staying abreast of cyberthreat developments and contributing to best practices and process enhancements Supporting the continuous development of the SOC team through knowledge sharing and mentoring In order to be successful for this role you will need to be able to demonstrate the following experience: Proven experience in a Security More ❯
Senior Security Operations Centre Analyst with a strong background in security operations, threat detection, and incident response is required by Logic Engagements to work for a large scale leading organisation based in Gosport, Hampshire As a Senior SOC Analyst, you will be at the forefront of digital defence-leading … using advanced SIEM platforms (Microsoft Sentinel, Splunk) Leading incident response and driving improvements in detection and containment strategies Tuning and maintaining detection rules, using threat frameworks like Mitre Att&ck Collaborating with colleagues to enhance the overall capability and resilience of the Security Operations Centre Staying abreast of cyberthreat developments and contributing to best practices and process enhancements Supporting the continuous development of the SOC team through knowledge sharing and mentoring In order to be successful for this role you will need to be able to demonstrate the following experience: Proven experience in a Security More ❯
Gosport, Hampshire, South East, United Kingdom Hybrid / WFH Options
Walsh Employment
and a generous flexible benefits fund Key Requirements We are seeking an experienced Senior SOC Analyst who brings a strong background in security operations , threat detection, and incident response. This is a critical role that supports the defence of national infrastructure through proactive monitoring, analysis, and improvement of cybersecurity … such as Microsoft Sentinel and Splunk Solid understanding of network protocols and infrastructure (e.g. TCP/IP , VPNs , firewalls ) Skilled in incident response and threat intelligence analysis Familiarity with Mitre Att&ck framework and advanced threat detection techniques Excellent analytical and problem-solving capabilities Able to provide mentorship … using advanced SIEM platforms ( Microsoft Sentinel , Splunk ) Leading incident response and driving improvements in detection and containment strategies Tuning and maintaining detection rules, using threat frameworks like Mitre Att&ck Collaborating with colleagues to enhance the overall capability and resilience of the Security Operations Centre Staying abreast of cyberMore ❯
and a generous flexible benefits fund. Key Requirements: We are seeking an experienced Senior SOC Analyst who brings a strong background in security operations , threat detection, and incident response. This is a critical role that supports the defence of national infrastructure through proactive monitoring, analysis, and improvement of cybersecurity … Microsoft Sentinel and Splunk . Solid understanding of network protocols and infrastructure (e.g. TCP/IP , VPNs , firewalls ). Skilled in incident response and threat intelligence analysis . Familiarity with Mitre Att&ck framework and advanced threat detection techniques. Excellent analytical and problem-solving capabilities. Able to provide … advanced SIEM platforms ( Microsoft Sentinel , Splunk ). Leading incident response and driving improvements in detection and containment strategies. Tuning and maintaining detection rules, using threat frameworks like Mitre Att&ck . Collaborating with colleagues to enhance the overall capability and resilience of the Security Operations Centre . Staying abreast More ❯
basingstoke, south east england, United Kingdom Hybrid / WFH Options
Cloud Decisions
security previews, and frontline support. You'll work at the sharp end of cyber defence, directly contributing to investigations involving nation-state threat actors (including IR, CH, and NK based campaigns) while refining your craft across enterprise-scale log ingestion and customised Sentinel integration engineering that will … wide log onboarding into Microsoft Sentinel – deploying standard and custom connectors, Function Apps, and parsers to build tailored SIEM solutions that drive real-world threat detection and response. Log ingestion at scale across numerous hybrid and multi-cloud environments Enhance custom Function Apps and ingestion pipelines Parse, normalise, and … optimise log telemetry to ensure precision and cost control Partner with IR teams on real attacks – tuning rules against live threat actor activity Sync closely with Microsoft teams to build cutting-edge detection capabilities Contribute to internal knowledge base and help shape engineering standards What's needed? Experience building More ❯
southampton, south east england, United Kingdom Hybrid / WFH Options
Cloud Decisions
security previews, and frontline support. You'll work at the sharp end of cyber defence, directly contributing to investigations involving nation-state threat actors (including IR, CH, and NK based campaigns) while refining your craft across enterprise-scale log ingestion and customised Sentinel integration engineering that will … wide log onboarding into Microsoft Sentinel – deploying standard and custom connectors, Function Apps, and parsers to build tailored SIEM solutions that drive real-world threat detection and response. Log ingestion at scale across numerous hybrid and multi-cloud environments Enhance custom Function Apps and ingestion pipelines Parse, normalise, and … optimise log telemetry to ensure precision and cost control Partner with IR teams on real attacks – tuning rules against live threat actor activity Sync closely with Microsoft teams to build cutting-edge detection capabilities Contribute to internal knowledge base and help shape engineering standards What's needed? Experience building More ❯
portsmouth, hampshire, south east england, United Kingdom Hybrid / WFH Options
Cloud Decisions
security previews, and frontline support. You'll work at the sharp end of cyber defence, directly contributing to investigations involving nation-state threat actors (including IR, CH, and NK based campaigns) while refining your craft across enterprise-scale log ingestion and customised Sentinel integration engineering that will … wide log onboarding into Microsoft Sentinel – deploying standard and custom connectors, Function Apps, and parsers to build tailored SIEM solutions that drive real-world threat detection and response. Log ingestion at scale across numerous hybrid and multi-cloud environments Enhance custom Function Apps and ingestion pipelines Parse, normalise, and … optimise log telemetry to ensure precision and cost control Partner with IR teams on real attacks – tuning rules against live threat actor activity Sync closely with Microsoft teams to build cutting-edge detection capabilities Contribute to internal knowledge base and help shape engineering standards What's needed? Experience building More ❯
both challenging and exciting situations. At DXC, we have a great opportunity for an experienced SOC Analyst to join the DXC CyberThreat Analysis Centre (CTAC), in this role you will be responsible for advancing the initial work conducted by Tier 1 Analysts and providing more in … Analyst works closely with senior and junior analysts to ensure a seamless SOC operation and acts as a bridge between foundational and advanced threat detection and response functions. Due to the customer requirements successful applicants must be eligible for high level UK Security clearance, SC and be able to … work onsite in Farnborough. Responsibilities: Conduct escalated triage and analysis on security events identified by Tier 1 Analysts, determining threat severity and advising on initial response actions. Apply expertise in SIEM solutions utilizing Kusto Query Language (KQL), to perform log analysis, event correlation, and thorough documentation of security incidents. More ❯
within the Microsoft 365 ecosystem. The ideal candidate will have deep technical expertise in M365 security capabilities and a strong understanding of modern cyberthreats, compliance requirements, and enterprise security architecture. Key Responsibilities: Design and implement security controls across E5 Microsoft 365 services (e.g., Endpoints; Exchange Online, SharePoint More ❯
within the Microsoft 365 ecosystem. The ideal candidate will have deep technical expertise in M365 security capabilities and a strong understanding of modern cyberthreats, compliance requirements, and enterprise security architecture. Key Responsibilities: Design and implement security controls across E5 Microsoft 365 services (e.g., Endpoints; Exchange Online, SharePoint More ❯
portsmouth, hampshire, south east england, United Kingdom
LHH
within the Microsoft 365 ecosystem. The ideal candidate will have deep technical expertise in M365 security capabilities and a strong understanding of modern cyberthreats, compliance requirements, and enterprise security architecture. Key Responsibilities: Design and implement security controls across E5 Microsoft 365 services (e.g., Endpoints; Exchange Online, SharePoint More ❯
Element has an opportunity for a Senior Cyber Engineer to become part of our growing Cyber Engineering Services. A successful candidate for the Cyber Engineer role will possess a solid foundation as a security engineer, responsible for ensuring the security of complex global environments … expertise in application, cloud, and infrastructure domains. In this hybrid role you will design and implement highly secure technical solutions to protect against cyberthreats and potential cyber-attacks. The role will be focused on detection engineering within the strategic Element security tooling. Core Responsibilities Assist … in the design and implementation of technical solutions and security toolsets to address security vulnerabilities, mitigate cyberthreats, and automate tasks. Contribute to the planning, implementation, and management of the security operations tooling roadmap. Collaborate on the engineering, implementation, management, monitoring, and upgrades of cyber security More ❯
Element has an opportunity for a Senior Cyber Engineer to become part of our growing Cyber Engineering Services. A successful candidate for the Cyber Engineer role will possess a solid foundation as a security engineer, responsible for ensuring the security of complex global environments … expertise in application, cloud, and infrastructure domains. In this hybrid role you will design and implement highly secure technical solutions to protect against cyberthreats and potential cyber-attacks. The role will be focused on detection engineering within the strategic Element security tooling. Core Responsibilities Assist … in the design and implementation of technical solutions and security toolsets to address security vulnerabilities, mitigate cyberthreats, and automate tasks. Contribute to the planning, implementation, and management of the security operations tooling roadmap. Collaborate on the engineering, implementation, management, monitoring, and upgrades of cyber security More ❯
portsmouth, hampshire, south east england, United Kingdom
Element Materials Technology
Element has an opportunity for a Senior Cyber Engineer to become part of our growing Cyber Engineering Services. A successful candidate for the Cyber Engineer role will possess a solid foundation as a security engineer, responsible for ensuring the security of complex global environments … expertise in application, cloud, and infrastructure domains. In this hybrid role you will design and implement highly secure technical solutions to protect against cyberthreats and potential cyber-attacks. The role will be focused on detection engineering within the strategic Element security tooling. Core Responsibilities Assist … in the design and implementation of technical solutions and security toolsets to address security vulnerabilities, mitigate cyberthreats, and automate tasks. Contribute to the planning, implementation, and management of the security operations tooling roadmap. Collaborate on the engineering, implementation, management, monitoring, and upgrades of cyber security More ❯
UK and Europe. As part of the Enterprise Security & Fraud (ES&F) organization, you will be at the forefront of protecting clients from cyberthreats while building and evolving critical identity and access management services. Key Responsibilities Design, develop, and enhance modern cloud-native cybersecurity services, spanning database More ❯
UK and Europe. As part of the Enterprise Security & Fraud (ES&F) organization, you will be at the forefront of protecting clients from cyberthreats while building and evolving critical identity and access management services. Key Responsibilities Design, develop, and enhance modern cloud-native cybersecurity services, spanning database More ❯
portsmouth, hampshire, south east england, United Kingdom
McGregor Boyall
UK and Europe. As part of the Enterprise Security & Fraud (ES&F) organization, you will be at the forefront of protecting clients from cyberthreats while building and evolving critical identity and access management services. Key Responsibilities Design, develop, and enhance modern cloud-native cybersecurity services, spanning database More ❯
southampton, south east england, United Kingdom Hybrid / WFH Options
Computappoint
based on candidate experience) Join one of the UK’s premier IT Services Providers as they continue to grow and strengthen their cyber defence capabilities. They're on the hunt for an experienced SOC Manager to lead Security Operations Centre (SOC) and drive innovation in how they detect … and work with cutting-edge technologies in a fast-paced, collaborative environment. What You’ll Do Lead 24/7 SOC operations, ensuring timely threat detection and incident response Drive continuous improvement in SOC processes, playbooks, and performance metrics Manage, mentor, and grow a team of SOC Analysts and … SOAR, IDS/IPS, firewalls, and cloud security Deep understanding of MITRE ATT&CK, NIST, ISO 27001, CIS frameworks Proven experience in incident response, threat intelligence, and multi-tenant SOCs Excellent leadership, communication, and client engagement skills Bonus Points for Certifications such as CISSP, CISM, GIAC (GSOM, GCIH), Microsoft More ❯
hampshire, south east england, United Kingdom Hybrid / WFH Options
Computappoint
based on candidate experience) Join one of the UK’s premier IT Services Providers as they continue to grow and strengthen their cyber defence capabilities. They're on the hunt for an experienced SOC Manager to lead Security Operations Centre (SOC) and drive innovation in how they detect … and work with cutting-edge technologies in a fast-paced, collaborative environment. What You’ll Do Lead 24/7 SOC operations, ensuring timely threat detection and incident response Drive continuous improvement in SOC processes, playbooks, and performance metrics Manage, mentor, and grow a team of SOC Analysts and … SOAR, IDS/IPS, firewalls, and cloud security Deep understanding of MITRE ATT&CK, NIST, ISO 27001, CIS frameworks Proven experience in incident response, threat intelligence, and multi-tenant SOCs Excellent leadership, communication, and client engagement skills Bonus Points for Certifications such as CISSP, CISM, GIAC (GSOM, GCIH), Microsoft More ❯
to hardware and software, including OOH maintenance Participate in a rota to provide emergency technical support Keep informed on the latest technologies and cyberthreats to strengthen network defences Skills will include: Certifications such as CCNA, plus advanced certifications like CCNP or CCDP Deep understanding of routing protocols More ❯
to hardware and software, including OOH maintenance Participate in a rota to provide emergency technical support Keep informed on the latest technologies and cyberthreats to strengthen network defences Skills will include: Certifications such as CCNA, plus advanced certifications like CCNP or CCDP Deep understanding of routing protocols More ❯
portsmouth, hampshire, south east england, United Kingdom
Harris Global
to hardware and software, including OOH maintenance Participate in a rota to provide emergency technical support Keep informed on the latest technologies and cyberthreats to strengthen network defences Skills will include: Certifications such as CCNA, plus advanced certifications like CCNP or CCDP Deep understanding of routing protocols More ❯
southampton, south east england, United Kingdom Hybrid / WFH Options
InfoSec People Ltd
Our client is an established UK based MSSP who are hiring for a Level 2 SOC Analyst to support their growing Threat Detection & Response team. This role will be ideal for someone with at least 2 years’ hands-on experience in a SOC. The successful candidate will: Manage and … for Level 1 analysts and provide mentoring Own customer communication and incident resolution Follow structured remediation playbooks and incident response procedures Support tool tuning, threat detection improvements, and service optimisation Participate in a 24/7 SOC environment (some on-call responsibilities, but no night shifts) Collaborate with SMEs … in IR, Threat Intelligence, and Detection Engineering Requirements 2+ years working in a SOC environment Strong grasp of cyberthreats, networking, and security tooling Experience in customer-facing or service desk roles Excellent communication skills (written and verbal) Actively pursuing certifications or qualifications in InfoSec or Networking More ❯
fareham, south east england, United Kingdom Hybrid / WFH Options
InfoSec People Ltd
Our client is an established UK based MSSP who are hiring for a Level 2 SOC Analyst to support their growing Threat Detection & Response team. This role will be ideal for someone with at least 2 years’ hands-on experience in a SOC. The successful candidate will: Manage and … for Level 1 analysts and provide mentoring Own customer communication and incident resolution Follow structured remediation playbooks and incident response procedures Support tool tuning, threat detection improvements, and service optimisation Participate in a 24/7 SOC environment (some on-call responsibilities, but no night shifts) Collaborate with SMEs … in IR, Threat Intelligence, and Detection Engineering Requirements 2+ years working in a SOC environment Strong grasp of cyberthreats, networking, and security tooling Experience in customer-facing or service desk roles Excellent communication skills (written and verbal) Actively pursuing certifications or qualifications in InfoSec or Networking More ❯