Senior SOC Analyst

Hybrid – negotiable on days in the office for the right candidate / Home working. Fed up with shift work? This is an opportunity that could be a game-changer if you’re currently navigating the challenges of shift work. This is a structured day shift role 9 am – 5.30 pm (Monday–Friday). If you’re looking for a step up in responsibilities and are ready to mentor a small team of placement students and apprentices, this is an opportunity to consider. Our client is a dedicated, pure-play cybersecurity consulting firm. As part of their growth plans, they are seeking a Senior SOC Analyst who combines technical expertise with a desire to lead junior analysts to join their dynamic, fast-paced team.

About the Role: This is a hands-on leadership role, where you will manage, train, and lead apprentices and placement students working in the SOC during the day shift. You will also play a key role in delivering advanced security operations services to clients across different industries when needed. As the Senior SOC Analyst, you will be central to incident response and threat hunting, while also guiding a small group of apprentices and junior analysts, all without the strain of late nights or on-call duties. In this senior position, you’ll mentor junior team members, contribute directly to client projects, and get your evenings back. The SOC team is deeply committed to leveraging the latest in automation and artificial intelligence, including SOAR platforms, to deliver smarter, faster, and more effective security outcomes. This role provides a unique opportunity to help shape the future of a next-gen SOC environment.

This role combines hands-on technical expertise with management responsibility, offering a unique blend and the chance to contribute meaningfully to both team development and cutting-edge security operations.

Key Responsibilities:

• Mentorship & Team Leadership: Guide and support juniors with ticket escalation and investigating incidents, fostering a culture of collaboration and continuous learning.
• Client Relationship Management: Act as a point of contact, managing ongoing communications and ensuring technical needs are met.
• Threat Detection & Analysis: Triage and analyse alerts across multiple SIEM platforms (e.g., Microsoft Sentinel, custom ELK stacks).
• Log & Threat Intelligence Analysis: Perform detailed log analysis and threat intelligence research to uncover root causes and bolster security defences.
• Technical Reporting: Deliver clear, client-focused reports on incidents, alerts, and threat activity.
• Escalation Handling: Manage critical escalations with precision and provide comprehensive, well-documented resolutions.
• SOC Innovation: Work with leadership to enhance operational efficiency and integrate emerging technologies.
• Incident Management: Lead security incident investigations and responses, offering strategic input to clients and internal teams.
• Continuous Development: Stay current on cybersecurity trends and research emerging threats, tools, and methodologies.

What We’re Looking For:

• Commercial experience with Microsoft Sentinel is a MUST, including investigations, rule tuning, workbook development, and automation playbook design.
• Microsoft SC-200 certification is a mandatory requirement. SC-100, SC-300, SC-400, or AZ-500 are highly desirable.
• Proficiency with EPP tools such as Microsoft Defender for Endpoint and SentinelOne.
• Experience working with ticketing systems and handling end-to-end workflows.
• Strong incident response and threat hunting skills.
• Excellent problem-solving abilities and the capacity to make sound decisions under pressure.
• Exceptional communication and interpersonal skills, with a customer-focused mindset.
• SANS certifications (desirable but not essential).

If you’re tired of shift work, want your evenings back, are passionate about security, looking to develop your people management skills, thrive in fast-paced environments, and wish to shape the future of a next-gen SOC, this role is for you.