Security Operations Center Analyst

(Senior) SOC Analyst/Cyber Security Enigneer

Location:

Central London

On behalf of a client, we’re are currently looking for an experienced Security Operations Centre (SOC) Analyst to join a high-performing cyber team supporting critical IT security functions. This role is ideal for someone with solid experience in security monitoring, incident handling, and practical detection engineering across modern enterprise environments.

• Actively monitor and evaluate security telemetry from SIEM platforms, network logs, EDR/XDR systems, IDS/IPS and other security controls to identify suspicious activity and potential threats.
• Triage alerts, investigate incidents and coordinate response steps to mitigate risk, including root-cause analysis and containment activities.
• Develop and refine detection content such as correlation rules, use cases, response playbooks and alert tuning to improve signal quality and reduce false positives.
• Leverage threat context and intelligence to enrich investigations and enhance overall detection capability.
• Collaborate closely with wider IT, risk, compliance and technical teams to ensure coordinated cyber response and security improvements.
• Contribute to ongoing SOC process development, documentation and performance optimisation.

• Several years’ experience performing SOC-style security monitoring and incident response in a live environment.
• Hands-on experience with SIEM tooling (e.g., Splunk, Microsoft Sentinel or similar), endpoint detection and response technology and network security fundamentals.
• Practical understanding of network protocols and the ability to interpret log and packet data to recognise anomalous behaviour.
• Experience applying established threat frameworks (e.g., MITRE ATT&CK, emerging cyber tradecraft) to detection and response activities.
• Strong analytical thinking and clear communication skills, with the ability to explain technical findings to both technical and non-technical stakeholders.

• Experience tuning detection logic, developing automated responses, or scripting integration tasks.
• Certifications such as Security+, CySA+, GIAC or equivalent.