Senior SOC Analyst in London

Motorway is the UK's fastest-growing used car marketplace - our award winning, online-only platform connects private car sellers with over 7,500 verified dealers nationwide, who compete to offer the best price. Founded in 2017, our technology makes the process refreshingly easy, earning us an 'Excellent' Trustpilot rating with over 70,000 reviews. We're not just building a platform; we're changing how people sell cars. Backed by leading investors like Index Ventures and ICONIQ Growth, and following a successful $190 million funding round, we're on a mission to transform the used car market.

We're looking for an experienced Senior SOC Analyst to assist in the development, enhancement and execution of our Security Operations capability. The successful candidate will develop SOC processes, procedures and workflows for systems security monitoring and security incident response. This role will work collaboratively with other business technical and non-technical teams.

The role will involve:

• Triage & Analysis: The focus here should be on MTTD (Mean Time to Detect).
• End-to-End IR: Leading incidents requires not just technical skill, but 'Incident Commander'.
• Vulnerability & Threat Hunting: This is proactive. Instead of waiting for an alarm, the lead should be searching for 'indicators of compromise' (IoCs) based on recent threat intelligence.
• Runbook Development: If a process is done more than twice, it should be in a runbook. In 2026, these are often 'Executable Runbooks' (Python/Bash) rather than just PDFs.
• Tooling & Alarms: This involves the maintenance of your SIEM/SOAR.
• Coverage & Noise Reduction: A lead must ruthlessly tune out 'false positives' so the team only sees high-fidelity alerts.
• Platform & Software Engineering: This is the 'Shift Left' approach.
• Platform: Ensuring Kubernetes/Cloud environments are hardened.
• Software: Implementing Secure by Design (e.g., automated SAST/DAST in the CI/CD pipeline).
• Tabletops & War Games: Regular exercises are the NCSC-recommended way to build 'muscle memory.'
• Audit & Metrics: Developing dashboards that show MTTR (Mean Time to Respond) and Vulnerability Burn-down rates for the Head of Sec.

Requirements:

• Secure by Design: Act as a security champion for Software and Platform Engineering teams to ensure 'Security-as-Code' is integrated into CI/CD pipelines.
• Advanced Threat Hunting: Proven ability to proactively hunt for threats using the MITRE ATT&CK framework.
• Cloud Security Operations: Hands‐on experience securing AWS and GCP environments.
• Forensics & Investigation: Mastery of deep‐diving systems forensics on both Windows and macOS.
• Automation & Scripting: Proficiency in Python or Go for automating SOC workflows (+ SOAR).
• Modern Observability: Experience with developer‐centric observability tools (e.g., Logfire, OpenTelemetry).
• Audit & Reporting: Ability to develop and maintain automated dashboards for MTTR and MTTD for executive reporting.
• Incident Commander: Ability to lead high‐severity incidents end‐to‐end.
• Detection Engineering: Expertise in tuning SIEM/EDR to reduce noise and maintain 'data freshness.'
• Playbook Development: Proven experience designing and implementing executable runbooks.
• Infrastructure Knowledge: Strong understanding of network protocols, API security, and container security.
• Readiness Exercises: Experience organising and running Tabletop Exercises and 'War Games.'
• Mentorship: A commitment to up‐skilling junior analysts.
• Standards: Good working knowledge of ISO27001, NIST CSF, and PCI DSS v4.0.

Benefits:

• A competitive salary
• BUPA health insurance
• Discounted gym membership through BUPA
• OnHand volunteering membership and one paid volunteering day per year
• Hybrid working
• Pension scheme
• Motorway car leasing scheme
• Enhanced parental leave
• Workplace nursery scheme
• Regular social events
• Cycle to work scheme

We are committed to equality of opportunity for all employees. We work to provide a supportive and inclusive environment where people can maximise their full potential. We believe our workforce should reflect a variety of backgrounds, talents, perspectives and experiences.