bradford, yorkshire and the humber, united kingdom
Claranet
The Role As an Associate SOCAnalyst, you bring a strong background in IT or cybersecurity to a transitory role that builds towards full SOCAnalyst responsibilities. You use your foundational knowledge to independently triage, investigate, and validate alerts using established playbooks. While you handle basic incident investigations and documentation, you escalate cases requiring … deeper analysis to Shift Leads or Senior SOC Analysts. This role focuses on developing your skills through mentoring, continuous learning, and hands-on experience, with the expectation of advancing to a full SOCAnalyst position within 18 months following your successful probationary period. Key Responsibilities Incident Triage & Investigation – You review and prioritise new alerts from security … basic checks to distinguish genuine threats from false positives. You rely on established playbooks and make initial validation decisions while escalating more complex incidents to Shift Leads or Senior SOC Analysts Continuous Improvement – You contribute to the enhancement of detection logic by identifying recurring or redundant alerts. You participate in threat hunting and skills development sessions to help reduce More ❯
The Role As an Associate SOCAnalyst, you bring a strong background in IT or cybersecurity to a transitory role that builds towards full SOCAnalyst responsibilities. You use your foundational knowledge to independently triage, investigate, and validate alerts using established playbooks. While you handle basic incident investigations and documentation, you escalate cases requiring … deeper analysis to Shift Leads or Senior SOC Analysts. This role focuses on developing your skills through mentoring, continuous learning, and hands-on experience, with the expectation of advancing to a full SOCAnalyst position within 18 months following your successful probationary period. Key Responsibilities Incident Triage & Investigation – You review and prioritise new alerts from security … basic checks to distinguish genuine threats from false positives. You rely on established playbooks and make initial validation decisions while escalating more complex incidents to Shift Leads or Senior SOC Analysts Continuous Improvement – You contribute to the enhancement of detection logic by identifying recurring or redundant alerts. You participate in threat hunting and skills development sessions to help reduce More ❯
London, South East, England, United Kingdom Hybrid / WFH Options
Atrium Workforce Solutions Ltd
Cyber SecuritySOCAnalyst – London/Remote Atrium EMEA is looking for an accomplished Cyber SecuritySOCAnalyst to support the Security Incident Response Team. The team is growing, we require a strong individual contributor that will investigate, analyse, and contain security incidents. This is a fully remote role, with the occasional London office … automation (Python, Powershell, Bash, KQL etc) • Financial services sector, a benefit/Shift work NOT required Click Apply now/contact Lianne to be considered for the Cyber SecuritySOCAnalyst – London/Remote role More ❯
Portsmouth, England, United Kingdom Hybrid / WFH Options
Cloud People
Senior SOCAnalyst £40,000 – £55,000 + Benefits + Training Hybrid (Portsmouth, UK) Company & Role This is more than a SOC role, it is a chance to join a fast growing, people first global service provider that is redefining what great cyber defence looks like. With over $1B in global revenue, this organisation delivers end … a powerful mix of Managed Detection and Response (MDR), Threat Hunting, Vulnerability Management, Penetration Testing and Incident Response, supported by a world class Security Advisory function. As a Senior SOCAnalyst, you will take a leading role in identifying, investigating and responding to cyber threats across varied client environments. You will mentor junior analysts, lead complex incidents … and help evolve the SOC’s detection and response capabilities. This is an opportunity to make a genuine impact, with the freedom to innovate and the support to grow into roles such as SOC Lead, Threat Hunter, Security Engineer or Incident Responder. Why This Role Stands Out Join a $1B global IT and Cyber Defence provider that invests More ❯
ROLE TITLE: SOCAnalyst LOCATION: flexible (can be mostly remote, must be based in UK) CLEARANCE: SC cleared, or eligible for SC clearance Salary: £35k - £41k The ideal candidate will have active SC Clearance or be eligible to undergo SC Clearance. We are actively looking to secure an SOCAnalyst to join Experis. Experis … approach is a very personal one, with both our clients and our own employees. We are passionate about training, technology and career development. Key accountabilities of the role A SOCAnalyst will be responsible for providing Protective Monitoring Services across a range of Secure Customers. They will be responsible for the day to day monitoring using various … Trend reporting Rule tuning and continual service improvement The role involves working alongside other team members including SOC engineers and Service Managers. Skills required: Microsoft Certified: SecurityOperationsAnalyst Associate Certification (SC200) is a mandatory requirement for role fulfilment Experience working with SIEM technologies and security tooling An understanding of IT Infrastructure and Networking An understanding of More ❯
Senior Incident Responder – SOCAnalyst (L3) Birmingham or Glasgow | Up to £71,000 + Bonus + Benefits | Hybrid | SC Clearance Required or Eligible Our client – a global technology and services firm – is expanding its Managed SecurityOperationsCentre and seeking a Senior Incident Responder (L3 SOCAnalyst) to take the lead on complex security … The Role You’ll take ownership of escalated incidents, conduct detailed investigations, and ensure effective containment and eradication of threats. You’ll act as the escalation point within the SOC, providing technical expertise, mentoring junior analysts, and driving continuous improvement of incident response processes. Key Responsibilities: Lead complex investigations into security incidents and breaches. Perform root cause analysis and … provide actionable recommendations. Conduct static and dynamic malware analysis; reverse engineer to identify IOCs. Monitor, tune, and optimise SIEM tools Develop and refine SOC use cases, runbooks, and playbooks. Integrate emerging threat intelligence into monitoring and detection workflows. Liaise with clients, Service Delivery Managers, and technical teams to manage escalations and coordinate response. Maintain high standards of documentation, including More ❯
Portsmouth, England, United Kingdom Hybrid / WFH Options
Computappoint
SecurityOperationsCentreAnalyst (SOCAnalyst) Salary: £50,000 to £55,000 (based on candidate experience) Office Location: Portsmouth Hybrid Model: 3-4 days on-site (remaining days remote) Working Hours: Monday-Friday, Standard office hours (potentially some remote 24x7 on-call) Employment Type : Permanent About the Role: Join one of the best work-life … organisations in the IT Sector as part of their newly developing & rapidly expanding Cyber Security division. As a SOCAnalyst, you'll be a vital part of a highly skilled SecurityOperationsCentre team, responding to security alerts, investigating incidents, and helping to protect internal security and enterprise environments. 🔐 What You'll Do: Monitor SIEM, IDS/… incidents, escalating when necessary. Conduct threat hunting and forensic analysis. Support rule development and tuning of detection systems. Assist with real-time detection, response, and containment. Maintain and improve SOC documentation and playbooks. Collaborate with team members and other departments to improve overall security posture. Required Skills & Qualifications: 2+ years’ experience in a SOC or similar role (preferably More ❯
SOCAnalyst - 1st UK Hire! Want to be part of the founding UK team for a $300m Global Cyber group? If you're a driven SOCAnalyst who wants more than just "another ops role" and want autonomy to shape a new function with global backing, this could be the role for you! You … growth across Europe, this is a rare opportunity to join early & help shape a new security capability. Why join? You'll play a key role establishing & scaling UK & EU SOC capability. You'll be backed by a $300m global organisation, with proven SOC frameworks & tooling in place. You'll report to the CISO, a recognised industry voice, frequently … are shaped. You'll be positioned for fast progression as the UK cyber practice scales, with forward growth for your role already scoped The Role You'll support US SOC across UK/EU timezones and UK/EU customers with autonomy to shape local processes, tools & culture. Monitor, investigate and respond to security alerts (Tier 2-level responsibility More ❯
Cheltenham, Gloucestershire, England, United Kingdom
Accenture
SOCAnalyst Location: Cheltenham Please Note: Due to the nature of client work you will be undertaking, you will need to be willing to go through a Security Clearance process as part of this role, which requires 5+ years UK address history at the point of application. Accenture is a leading global professional services company, providing a More ❯
Role Description: SecurityAnalyst - Network & Endpoint/SOCSecurity Specialist We are looking for a highly capable and technically … skilled SecurityAnalyst to join our cybersecurity team. This role focuses on network and endpoint securityoperations, threat intelligence, and incident response within a SecurityOperationsCentre (SOC) environment. The successful candidate will have hands-on experience with leading security platforms and demonstrate the ability to operate at a team lead level. Key Responsibilities: Network Detection & Response … incidents based on network telemetry. Endpoint Protection: Deploy and manage CrowdStrike Falcon agents across enterprise endpoints. Maintain and update detection rules, ensuring alignment with threat intelligence. SecurityOperationsCentre (SOC): Act as a Level 2 SOCAnalyst and Incident Handler. Triage, investigate, and respond to security alerts and incidents. Collaborate with other SOC team members More ❯
Role Description: SecurityAnalyst - Network & Endpoint/SOCSecurity Specialist We are looking for a highly capable and technically … skilled SecurityAnalyst to join our cybersecurity team. This role focuses on network and endpoint securityoperations, threat intelligence, and incident response within a SecurityOperationsCentre (SOC) environment. The successful candidate will have hands-on experience with leading security platforms and demonstrate the ability to operate at a team lead level. Key Responsibilities: Network Detection & Response … incidents based on network telemetry. Endpoint Protection: Deploy and manage CrowdStrike Falcon agents across enterprise endpoints. Maintain and update detection rules, ensuring alignment with threat intelligence. SecurityOperationsCentre (SOC): Act as a Level 2 SOCAnalyst and Incident Handler. Triage, investigate, and respond to security alerts and incidents. Collaborate with other SOC team members More ❯
Role Description: SecurityAnalyst - Network & Endpoint/SOCSecurity Specialist We are looking for a highly capable and technically … skilled SecurityAnalyst to join our cybersecurity team. This role focuses on network and endpoint securityoperations, threat intelligence, and incident response within a SecurityOperationsCentre (SOC) environment. The successful candidate will have hands-on experience with leading security platforms and demonstrate the ability to operate at a team lead level. Key Responsibilities: Network Detection & Response … incidents based on network telemetry. Endpoint Protection: Deploy and manage CrowdStrike Falcon agents across enterprise endpoints. Maintain and update detection rules, ensuring alignment with threat intelligence. SecurityOperationsCentre (SOC): Act as a Level 2 SOCAnalyst and Incident Handler. Triage, investigate, and respond to security alerts and incidents. Collaborate with other SOC team members More ❯
Senior SecurityAnalyst – SOC/Incident Response I’m partnering with a fast-growing Cyber Defence function that’s strengthening its SecurityOperationsCentre and looking for a talented Senior SecurityAnalyst to join the team. You’ll take a leading role in detecting, analysing, and responding to cyber threats across diverse client environments, mentoring … junior analysts, improving detection content, and helping drive SOC maturity. What you’ll do: Lead complex investigations and incident response. Develop SIEM/EDR use cases and correlation rules. Perform proactive threat hunting and support automation initiatives. Produce incident reports and guide remediation activities. Help coach and upskill junior analysts. You should bring: 2–4 years’ experience in a … SOC, CSIRT, or cyber defence environment. Solid knowledge of SIEM and EDR platforms (Sentinel, Splunk, Defender, CrowdStrike, etc.). Understanding of MITRE ATT&CK and network/cloud security principles. Strong analytical and communication skills. Bonus points for: Scripting or automation experience (KQL, PowerShell, Python). Background in threat hunting or vulnerability management. Why apply? Hybrid flexibility, funded certifications More ❯
provide visa sponsorship. ⚠️ ⚠️ Also, this is an experienced hire role. Please do not apply if you are seeking your first role in cyber security - look out for our Graduate SOCAnalyst roles instead ⚠️ What we’re offering (saves you scrolling straight to the bottom): Salary: £40,000–46,000 depending on experience Shares: We operate an EMI … same. Joining CyPro means becoming an integral part of our mission and joining a team of industry experts embarking on this journey. The Role: This isn’t your typical SOCAnalyst role where you’re pigeonholed into one narrow specialism. At CyPro, you’ll have the opportunity to get involved in a wide range of areas including … Review and tag IOCs and TTPs observed in client environments. Participate in proactive threat hunting sprints to identify risks before they escalate. Client Support & Reporting Prepare weekly and monthly SOC reports highlighting activity, incidents and trends. Join governance calls with senior analysts or managers to present SOC insights. Respond to client queries regarding investigations, coverage and data flows. More ❯
provide visa sponsorship. ⚠️ ⚠️ Also, this is an experienced hire role. Please do not apply if you are seeking your first role in cyber security - look out for our Graduate SOCAnalyst roles instead ⚠️ What we’re offering (saves you scrolling straight to the bottom): Salary: £40,000–46,000 depending on experience Shares: We operate an EMI … same. Joining CyPro means becoming an integral part of our mission and joining a team of industry experts embarking on this journey. The Role: This isn’t your typical SOCAnalyst role where you’re pigeonholed into one narrow specialism. At CyPro, you’ll have the opportunity to get involved in a wide range of areas including … Review and tag IOCs and TTPs observed in client environments. Participate in proactive threat hunting sprints to identify risks before they escalate. Client Support & Reporting Prepare weekly and monthly SOC reports highlighting activity, incidents and trends. Join governance calls with senior analysts or managers to present SOC insights. Respond to client queries regarding investigations, coverage and data flows. More ❯
provide visa sponsorship. ⚠️ ⚠️ Also, this is an experienced hire role. Please do not apply if you are seeking your first role in cyber security - look out for our Graduate SOCAnalyst roles instead ⚠️ What we’re offering (saves you scrolling straight to the bottom): Salary: £40,000–46,000 depending on experience Shares: We operate an EMI … same. Joining CyPro means becoming an integral part of our mission and joining a team of industry experts embarking on this journey. The Role: This isn’t your typical SOCAnalyst role where you’re pigeonholed into one narrow specialism. At CyPro, you’ll have the opportunity to get involved in a wide range of areas including … Review and tag IOCs and TTPs observed in client environments. Participate in proactive threat hunting sprints to identify risks before they escalate. Client Support & Reporting Prepare weekly and monthly SOC reports highlighting activity, incidents and trends. Join governance calls with senior analysts or managers to present SOC insights. Respond to client queries regarding investigations, coverage and data flows. More ❯
london (city of london), south east england, united kingdom
CyPro
provide visa sponsorship. ⚠️ ⚠️ Also, this is an experienced hire role. Please do not apply if you are seeking your first role in cyber security - look out for our Graduate SOCAnalyst roles instead ⚠️ What we’re offering (saves you scrolling straight to the bottom): Salary: £40,000–46,000 depending on experience Shares: We operate an EMI … same. Joining CyPro means becoming an integral part of our mission and joining a team of industry experts embarking on this journey. The Role: This isn’t your typical SOCAnalyst role where you’re pigeonholed into one narrow specialism. At CyPro, you’ll have the opportunity to get involved in a wide range of areas including … Review and tag IOCs and TTPs observed in client environments. Participate in proactive threat hunting sprints to identify risks before they escalate. Client Support & Reporting Prepare weekly and monthly SOC reports highlighting activity, incidents and trends. Join governance calls with senior analysts or managers to present SOC insights. Respond to client queries regarding investigations, coverage and data flows. More ❯
provide visa sponsorship. ⚠️ ⚠️ Also, this is an experienced hire role. Please do not apply if you are seeking your first role in cyber security - look out for our Graduate SOCAnalyst roles instead ⚠️ What we’re offering (saves you scrolling straight to the bottom): Salary: £40,000–46,000 depending on experience Shares: We operate an EMI … same. Joining CyPro means becoming an integral part of our mission and joining a team of industry experts embarking on this journey. The Role: This isn’t your typical SOCAnalyst role where you’re pigeonholed into one narrow specialism. At CyPro, you’ll have the opportunity to get involved in a wide range of areas including … Review and tag IOCs and TTPs observed in client environments. Participate in proactive threat hunting sprints to identify risks before they escalate. Client Support & Reporting Prepare weekly and monthly SOC reports highlighting activity, incidents and trends. Join governance calls with senior analysts or managers to present SOC insights. Respond to client queries regarding investigations, coverage and data flows. More ❯
potential of their IT infrastructure Description We are seeking enthusiastic, dedicated and detail-oriented Level 1 SOCAnalyst to join our UK based SecurityOperationsCentre (SOC). The successful candidate will be responsible for the initial analysis and triage of security alerts, monitoring security systems, and supporting the development of security event investigation and analysis … SIEM specific qualifications and exposure are evident. Desirable Certifications (any of): Microsoft AZ-200 ISC2 Certified in Cybersecurity CompTIA Security+ Internal CompTIA CySA+ GIAC Security Essentials EC Council Certified SOCAnalyst Cisco Certified Cybersecurity Cisco Certified Network Associate Demonstrable experience using Microsoft Sentinel or Similar SIEM tooling. Familiarity with security tools and technologies such as SIEM, IDS More ❯
Primary Details Time Type: Full time Worker Type: Employee SOC Principal Analyst Permanent London/Hybrid At QBE, our purpose is to enable a more resilient future. We are an international insurer and reinsurer with a local presence in 27 countries. The Opportunity QBE Europe is currently recruiting a SOC Principal Analyst to join … our cyber security team in our London Office. Reporting to regional team leads, the SOC Principal Analyst will be a key member of our rapidly growing Global SecurityOperations team. Your new role This is an exciting hands-on technical role in which the specialist will use their security skills and knowledge to perform advanced analysis on … response to cyber security-related incidents to prevent QBE from becoming compromised by modern attack methods and techniques. Main responsibilities: Act as point of escalation and mentor to junior SOC analysts. Translates business objectives into security objectives by providing support in design/architecture for new security applications to improve the current security posture globally for QBE. Recommends and More ❯
Cheltenham, Gloucestershire, England, United Kingdom
Accenture
Lead SOCAnalyst - Cheltenham Please Note: Any offer of employment is subject to satisfactory BPSS and SC security clearance which requires 5 years continuous UK address history (typically including no periods of 30 consecutive days or more spent outside of the UK) and declaration of being a British passport holder with no dual nationalism at the point More ❯
We’re not your typical cyber team. We’re collaborative, curious, and customer-obsessed and we’re looking for a Junior SOCAnalyst to join our growing London based SecurityOperations Centre. You’ll work alongside a passionate team to help deliver critical cyber detection and response services for some of Australia’s most recognised enterprise and … intrusion attempts. Investigate phishing emails, suspicious domains, and IP addresses using OSINT and threat intelligence sources. Proactively monitor, analyse, and escalate security events and incidents in collaboration with other SOC team members. Assist in the configuration, administration and enhancement of security tools and platforms. Support implementation of security projects for internal and customer environments, including troubleshooting and client interaction. … structure, and a hunger to learn plus a great team spirit and a growing passion for cyber security. Ideally, your toolkit includes: 1–2 years of experience in a SOC or related cyber role. Exposure to AI SIEM, XDR or EDR platforms such as Splunk, Microsoft Sentinel or SentinelOne Experience with Microsoft Security platforms and Windows security fundamentals. Familiarity More ❯
We’re not your typical cyber team. We’re collaborative, curious, and customer-obsessed and we’re looking for a Junior SOCAnalyst to join our growing London based SecurityOperations Centre. You’ll work alongside a passionate team to help deliver critical cyber detection and response services for some of Australia’s most recognised enterprise and … intrusion attempts. Investigate phishing emails, suspicious domains, and IP addresses using OSINT and threat intelligence sources. Proactively monitor, analyse, and escalate security events and incidents in collaboration with other SOC team members. Assist in the configuration, administration and enhancement of security tools and platforms. Support implementation of security projects for internal and customer environments, including troubleshooting and client interaction. … structure, and a hunger to learn plus a great team spirit and a growing passion for cyber security. Ideally, your toolkit includes: 1–2 years of experience in a SOC or related cyber role. Exposure to AI SIEM, XDR or EDR platforms such as Splunk, Microsoft Sentinel or SentinelOne Experience with Microsoft Security platforms and Windows security fundamentals. Familiarity More ❯
We’re not your typical cyber team. We’re collaborative, curious, and customer-obsessed and we’re looking for a Junior SOCAnalyst to join our growing London based SecurityOperations Centre. You’ll work alongside a passionate team to help deliver critical cyber detection and response services for some of Australia’s most recognised enterprise and … intrusion attempts. Investigate phishing emails, suspicious domains, and IP addresses using OSINT and threat intelligence sources. Proactively monitor, analyse, and escalate security events and incidents in collaboration with other SOC team members. Assist in the configuration, administration and enhancement of security tools and platforms. Support implementation of security projects for internal and customer environments, including troubleshooting and client interaction. … structure, and a hunger to learn plus a great team spirit and a growing passion for cyber security. Ideally, your toolkit includes: 1–2 years of experience in a SOC or related cyber role. Exposure to AI SIEM, XDR or EDR platforms such as Splunk, Microsoft Sentinel or SentinelOne Experience with Microsoft Security platforms and Windows security fundamentals. Familiarity More ❯
london (city of london), south east england, united kingdom
Orro Group
We’re not your typical cyber team. We’re collaborative, curious, and customer-obsessed and we’re looking for a Junior SOCAnalyst to join our growing London based SecurityOperations Centre. You’ll work alongside a passionate team to help deliver critical cyber detection and response services for some of Australia’s most recognised enterprise and … intrusion attempts. Investigate phishing emails, suspicious domains, and IP addresses using OSINT and threat intelligence sources. Proactively monitor, analyse, and escalate security events and incidents in collaboration with other SOC team members. Assist in the configuration, administration and enhancement of security tools and platforms. Support implementation of security projects for internal and customer environments, including troubleshooting and client interaction. … structure, and a hunger to learn plus a great team spirit and a growing passion for cyber security. Ideally, your toolkit includes: 1–2 years of experience in a SOC or related cyber role. Exposure to AI SIEM, XDR or EDR platforms such as Splunk, Microsoft Sentinel or SentinelOne Experience with Microsoft Security platforms and Windows security fundamentals. Familiarity More ❯