Level 2 SOC Analyst

Role: Level 2 SOC Analsyt

Location: Multiple (London, Manchester, Nottingham)

Salary: £33,000 - £40,000

Summary: Oscar Technology have partnered with a large tech company to assist with the expantion of their security operations capability and are looking for a proactive and skilled Level 2 SOC Analyst to support their growing client base. This role is ideal for someone with hands-on SOC or incident response experience who enjoys analysing complex security events and helping strengthen defensive operations.

As a Level 2 SOC Analyst, you will act as a key escalation point for junior analysts, taking ownership of advanced investigations and contributing to continuous improvement of our security monitoring services. You'll work across a variety of customer environments, supporting incident response, enhancing detection logic, and ensuring threats are identified and contained quickly.

This position includes participation in an on-call rotation for high-priority incidents, with additional compensation provided for out-of-hours work.

Key Responsibilities:

• Handle escalations from Level 1 analysts and validate complex alerts.

• Conduct in-depth analysis using SIEM, EDR, XDR and threat intelligence sources to establish root cause, scope and impact.

• Lead containment and remediation actions in coordination with senior engineers and incident response leads.

• Develop and refine detection content, queries and automated workflows within SIEM/SOAR tooling.

• Provide customers with clear incident summaries, technical explanations and remediation guidance.

• Identify emerging threats and document relevant tactics, techniques, and procedures.

• Support structured threat hunting activities and contribute to improving detection coverage.

• Maintain accurate and comprehensive investigation records within the SOC ticketing platform.

• Mentor junior analysts, helping improve triage processes and technical capability.

Required Skills and Experience:

• Approximately 1-4 years' experience in a SOC, MDR provider, or incident response environment.

• Strong analytical mindset with excellent attention to detail.

• Solid understanding of adversary techniques (e.g., MITRE ATT&CK) and common attack patterns.

• Hands-on experience using SIEM tools (e.g., Sentinel or equivalent platforms).

• Familiarity with EDR/XDR solutions such as Defender for Endpoint, CrowdStrike, SentinelOne or similar.

• Good grounding in core networking and security concepts (TCP/IP, firewalls, IDS/IPS).

• Practical knowledge of Windows, Linux and cloud environments (Azure, AWS or GCP).

• Strong written and verbal communication skills, especially for technical reporting.

• Ability to work independently and collaboratively in a dynamic environment.

Desirable Skills:

• Experience in scripting or automation (Python, PowerShell, etc.).

• Industry certifications such as Security+, SC-200, GIAC or other relevant qualifications.

• Exposure to threat intelligence workflows or incident response methodologies.

Salary and Benefits:

• Salary: £33,000 - £40,000, depending on experience.

• 25 days' annual leave plus an additional day for your birthday.

• Private medical cover, dental and optical cashback options, life insurance, and pension scheme.

Role: Level 2 SOC Analsyt

Location: Multiple (London, Manchester, Nottingham)

Salary: £33,000 - £40,000

Oscar Associates (UK) Limited is acting as an Employment Agency in relation to this vacancy.

To understand more about what we do with your data please review our privacy policy in the privacy section of the Oscar website.