Belfast, Northern Ireland (Hybrid - 2 days onsite) SC-200 Certification Required Must be eligible for UK SC Clearance
We're looking for an experienced Level 3 SOC Analyst / Senior Cyber Security Operations Analyst to join a growing Cyber Security Operations team supporting critical client environments.
This is an excellent opportunity for a security professional with strong experience in incident response, threat hunting, threat intelligence, and SIEM technologies to play a key role in protecting complex enterprise environments.
Key Responsibilities
- Investigate and manage security incidents escalated from Tier 1 & Tier 2 analysts
- Conduct business impact assessments and recommend appropriate response actions
- Perform advanced threat analysis, threat hunting, and incident investigations
- Analyse and enrich threat intelligence from multiple sources
- Support major incident response activities including containment and remediation
- Develop and improve SIEM use cases, detection rules, monitoring content, and SOC processes
- Mentor junior analysts and provide technical guidance across the SOC function
- Assist with onboarding new log sources and developing detection capabilities
- Produce stakeholder reports and provide security recommendations
Technical Environment
You'll work with technologies including:
- Microsoft Sentinel
- Microsoft Defender for Identity (MDI)
- IBM QRadar
- LogRhythm
- KQL
- Logic Apps
- SOAR Technologies
Qualifications
- Level 3 SOC Analyst or Senior Security Operations experience
- SC-200 Certification (Mandatory)
- Experience with Microsoft Sentinel
- Threat Hunting and Threat Intelligence experience
- Incident Response and Security Monitoring experience
- SIEM onboarding, tuning, configuration, and reporting
- Strong understanding of networking and operating systems
- Experience with Windows and/or Linux administration
- Ability to communicate effectively with technical and non-technical stakeholders
- Eligible for UK SC Clearance
- KQL, Workbook, Playbook and Detection Rule development
- Sentinel Lighthouse and multi-tenant environments
- DevOps and SOC automation experience
#CyberSecurity #SOCAnalyst #MicrosoftSentinel #ThreatHunting #IncidentResponse #SC200 #CyberJobs #BelfastJobs #InformationSecurity #BlueTeam #Hiring #SecurityOperations #QRadar #Defender #UKJobs
#J-18808-Ljbffr
