Hybrid Security Operations Analyst | SOC & Threat Hunting

SmartRecruiters, Inc.; Melbourn; Hybrid; GBP 55,000 - 85,000; Full time

Benefits offered by this job

Private healthcare

25 days leave + Christmas Eve half-day

Company pension

Community initiatives

Annual bonus

PA share ownership

Tax efficient benefits

Job summary

PA Consulting is seeking an Information Security Analyst for its Security Operations Centre in the UK. The role focuses on monitoring, detecting, and responding to security incidents across multiple platforms, with hands-on threat hunting and proactive improvements to detections and workflows.

You will work in a hybrid setup (office 2-3 days per week), participate in on-call rotations, and contribute to risk-based guidance, incident reviews, and security improvements.

Qualifications

• Practical SOC/incident response experience with security monitoring and detections.
• Strong log analysis and correlation skills across endpoint, identity, email, cloud, and network telemetry.
• Experience using SIEM and EDR/ XDR platforms to investigate alerts and support containment.

Responsibilities

• Monitor and investigate security alerts across SIEM, EDR/XDR, email security, cloud platforms, identity, network security and data loss prevention tooling.
• Triage security events, determine scope and impact, coordinate containment and remediation, and maintain evidence.
• Proactively hunt threats using threat intelligence and attacker techniques relevant to PA.
• Develop and tune detections, dashboards, playbooks and automation to improve coverage and reduce alert volume.
• Support forensic analysis, malware and phishing investigations and post-incident reviews as required.
• Collaborate with asset owners on vulnerability exposure management and remediation prioritization.

Skills

SOC experience

Incident response

Log analysis

SIEM/EDR tools

Threat hunting

Cloud security

Documentation

Tools

SIEM/EDR platforms

Job description

PA Consulting is seeking an Information Security Analyst for its Security Operations Centre in the UK. The role focuses on monitoring, detecting, and responding to security incidents across multiple platforms, with hands-on threat hunting and proactive improvements to detections and workflows.

You will work in a hybrid setup (office 2-3 days per week), participate in on-call rotations, and contribute to risk-based guidance, incident reviews, and security improvements.