SOC Analyst

Location: Hursley - On-site

Security clearance: UK national with a minimum of 5 years' UK residency required

Certification: Microsoft Certified: Security Operations Analyst Associate

We are seeking a technically strong and proactive Technical Consultant – Threat Detection, Response & Intelligence to join our security operations capability. You will play a key role in monitoring, investigating and responding to cyber threats, helping protect critical systems and improving the organisation's overall security posture. This is an excellent opportunity for an experienced SOC or security operations professional who combines hands-on technical expertise with strong analytical thinking, clear communication and a genuine interest in threat management.

The SC-200 certification validates expertise in investigating, mitigating and responding to threats using Microsoft security technologies, including Sentinel and Defender tooling.

What you'll do:

• Monitor, triage and investigate security alerts and events across SIEM and wider security tooling.
• Identify suspicious activity, indicators of compromise and potential security incidents.
• Conduct initial incident investigations, assess severity and impact, and escalate appropriately with clear supporting evidence.
• Support the full incident response lifecycle, including containment, remediation and post-incident learning.
• Use threat intelligence to strengthen detection, investigation and response activities.
• Contribute to threat monitoring, reporting and trend analysis.
• Tune detection rules and analytics to reduce false positives and improve detection quality.
• Support continual service improvement across security monitoring and response processes.
• Work collaboratively with security, infrastructure and wider technology teams, while also managing independent workstreams effectively.

What we're looking for:

Essential:

• UK national with a minimum of 5 years' UK residency.
• Microsoft Certified: Security Operations Analyst Associate (SC-200) - mandatory.
• Practical experience with SIEM technologies and security tooling.
• Solid understanding of IT infrastructure and networking.
• Understanding of vulnerability and threat management.
• Knowledge of the incident response lifecycle.
• Strong team-working skills alongside the ability to work independently.
• Adaptable and resilient in a fast-paced, changing workload.
• Genuine interest in cyber security, threat detection and threat management.

Desirable:

• Protective Monitoring or SOC experience.
• Hands-on experience with SIEM platforms such as QRadar, Microsoft Sentinel or LogRhythm Security Analytics.
• Experience in incident investigation, triage and escalation.
• Threat monitoring and response experience.
• Trend reporting and security analytics.
• Detection rule tuning and continual service improvement.