Senior SOC Analyst in Reading

Ballantyne Technology is working exclusively on a senior-level Security Operations opportunity with an international, industry leading software business operating in a modern cloud environment. This is not a traditional SOC role focused on alert handling. The position sits at the senior technical level and combines incident leadership, detection engineering, threat hunting and automation. You’ll have genuine ownership of security operations maturity rather than working in a ticket-driven environment.

The role involves acting as a senior technical point of escalation within the SOC, leading complex investigations and driving continuous improvement across tooling, detection capability and response processes.

Typical responsibilities include:

• Leading complex security incidents end-to-end including investigation, containment, forensics and root cause analysis.
• Designing, tuning and improving detection across SIEM and EDR platforms.
• Proactive threat hunting across cloud infrastructure, applications, and CI/CD environments.
• Building and maintaining automation and response playbooks using SOAR tooling.
• Working closely with DevOps, infrastructure and engineering teams to improve security posture and response capability.
• Reducing alert fatigue, improving logging coverage and strengthening SOC maturity.
• Ensuring security operations and incident response practices are aligned with industry-recognised frameworks such as ISO 27001.
• Supporting audit readiness, documentation and operational standards.
• Mentoring and supporting junior analysts where required.

What I’m looking for:

• Strong experience in senior SOC / blue team / security operations roles.
• Hands-on SIEM engineering and detection tuning experience.
• Proven ownership of complex incident response and investigations.
• Cloud security experience across Azure and AWS.
• Experience automating SOC workflows and response processes.
• Threat hunting experience beyond basic log review.
• Comfortable engaging directly with technical stakeholders.
• Able to prioritise and operate effectively under pressure.

Useful but not essential:

• Container or Kubernetes environments.
• CI/CD security tooling exposure.
• Red or purple team experience.

Why this opportunity:

• Senior ownership and autonomy.
• Strong investment in tooling and automation.
• Opportunity to genuinely influence how security operations operate.

This is a fantastic opportunity to join an innovative company with a clear mission to revolutionise the Engineering and Construction industry through digitalisation. You will be part of a passionate and creative team that values your contributions and supports your professional development.

Apply Now: If you are ready to take on this challenging and rewarding role, we would love to hear from you. Apply today to join the team and help us build a safer, healthier, and more sustainable future.