Biometric SOC Analyst: Threat Hunter & Incident Responder

iProov; Greater London; Hybrid; GBP 54,000 - 66,000; Full time

Benefits offered by this job

Growth Shares allocated after passing

Pension

Cycle To Work

Electric Car Scheme

Life Assurance

SmartHealth - Private GP/psychologist;

Flexible hybrid working environment

Free Barista Coffee/Tea

WeWork office perks

Job summary

iProov is seeking a Biometric SOC Analyst in London (Hybrid) to join the iSOC team. The role combines data analytics with threat intelligence to monitor alerts, hunt threats, and strengthen our biometric defense posture.

You will work with cross-functional teams and must pass UK Security Clearance checks. Expect responsibilities around monitoring production traffic, refining detection rules, and producing threat reports.

Qualifications

• Demonstrated incident triage experience and threat analysis.
• Interest in biometrics and expanding skills.
• Strong Python/SQL data analysis capability.
• Experience with Bash/Linux command line.
• Familiarity with data visualisation and dashboards an advantage.

Responsibilities

• Monitor biometric imagery from production traffic to detect fraudulent patterns.
• Escalate validated alerts to the incident response team.
• Fine-tune alerting rules to reduce false positives/negatives.
• Collect global and internal threat intelligence to inform actions.
• Proactively research and conduct threat hunting for novel biometric attacks.
• Produce threat reports and summaries for leadership and teams.

Skills

Python

SQL

BigQuery

Bash

Linux

Incident triage

STEM

Independent thinker

Attention to detail

Cross-functional

Job description

iProov is seeking a Biometric SOC Analyst in London (Hybrid) to join the iSOC team. The role combines data analytics with threat intelligence to monitor alerts, hunt threats, and strengthen our biometric defense posture.

You will work with cross-functional teams and must pass UK Security Clearance checks. Expect responsibilities around monitoring production traffic, refining detection rules, and producing threat reports.