L3 SOC Analyst in London

Location: London (Hybrid)

Do you want to help protect a global organisation from evolving cyber threats while shaping the future of cyber security operations? At Inchcape, we're pursuing an exciting strategy to transform our global business and accelerate our industry towards a low-carbon, sustainable future.

This role is part of Inchcape's Global Cyber Security team, supporting our worldwide operations through advanced security monitoring, threat detection and incident response capabilities. You'll play a critical role in protecting our people, systems and data, working alongside highly skilled security professionals in a collaborative and fast-paced environment.

As Senior Security Analyst, you'll operate in an L3 Security Operations Centre (SOC) capacity, serving as the senior technical escalation point for complex cyber security incidents and advanced threat investigations. You'll drive continuous improvement across detection engineering, threat hunting, automation and incident response capabilities, helping strengthen Inchcape's cyber resilience and security maturity.

This is a unique opportunity to combine deep technical expertise with strategic influence, working across global teams to enhance security operations, implement innovative solutions and defend against emerging threats.

What You'll Do

• Act as the senior technical escalation point for high-severity and complex cyber security incidents, providing expert analysis and guidance throughout investigations.
• Lead the technical response to major incidents, coordinating containment, eradication and recovery activities with internal and external stakeholders.
• Design, develop and optimise detection rules, threat models and advanced monitoring capabilities across SIEM, EDR and cloud security platforms.
• Conduct proactive threat hunting activities using threat intelligence, behavioural analytics and industry frameworks to identify previously undetected threats.
• Develop and enhance security automation and SOAR playbooks to improve operational efficiency, response capability and analytical effectiveness.
• Mentor and support SOC analysts while contributing to the ongoing maturity of detection engineering, incident response and security operations practices.

About You

To be successful in this role, you'll bring extensive cyber security operations experience, strong technical expertise and a passion for continuous improvement in a global security environment. You'll demonstrate:

• Significant experience operating in a senior SOC environment, including working in an L3 analyst, incident response, threat hunting or detection engineering capacity.
• Deep technical knowledge of SIEM, EDR, SOAR, cloud security, identity security, endpoint security and enterprise monitoring platforms.
• Proven experience leading the investigation and response to complex cyber security incidents and acting as a senior technical decision-maker.
• Strong detection engineering and threat hunting capabilities, including experience with frameworks such as MITRE ATT&CK.
• Experience developing security automation, orchestration workflows and process improvements that enhance SOC effectiveness.
• Excellent communication, stakeholder management and mentoring skills, with the ability to explain complex technical concepts to both technical and non-technical audiences.

Opportunity for everyone

At Inchcape, inclusion accelerates our success. We are committed to creating a workplace where everyone feels valued, heard, and empowered to thrive. We foster an inclusive culture that reflects the communities we serve, ensuring opportunities for all.

About us

Inchcape is the leading global automotive distributor operating in markets. We partner with some of the biggest brands in the business to sustainably power better mobility today and in the future. Our diverse global team of over 16,000 talented colleagues foster an inclusive and collaborative culture, delivering a brilliant experience for our customers and partners. We’re a dynamic and fast-growing business, driving the transformation of our industry and redefining tomorrow.

Selected candidates will be contacted to initiate our hiring journey. We may request additional information from applicants to better understand your background, qualifications and experience for the role.