Hybrid SOC Threat Hunter & Incident Response Analyst

Remote Worker LTD.; Melbourn; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Health & lifestyle perks

25 days annual leave

Company pension

Bonus scheme

PA share ownership

Cycle to work

Community initiatives

Job summary

PA Consulting is seeking a Security Operations Centre professional to join our Group Systems Security Operations Centre (SOC). The role monitors the technology estate, investigates security incidents, hunts threats, and continually improves detections, controls and practices.

Hybrid work model with 2–3 days in the office. You will analyse alerts across SIEM/EDR, triage incidents, coordinate containment, document investigations clearly, and collaborate with asset owners and cross-functional

Qualifications

• Experience in SOC, IR, or detection engineering roles.
• Ability to investigate across endpoint, identity, email, cloud and network telemetry.
• Proven documentation of investigations for technical and non-technical audiences.

Responsibilities

• Monitor and investigate security alerts across SIEM, EDR/XDR, email security, cloud platforms, identity, network security and data loss prevention tooling.
• Triage security events, determine scope and impact, coordinate containment and remediation, and maintain investigation records.
• Perform proactive threat hunting using threat intelligence and attacker techniques.
• Develop detections, dashboards, playbooks, and automation to improve coverage.
• Support digital forensics, malware and phishing analysis, and post-incident reviews.
• Analyze threat intel and vulnerabilities, advising on proportionate actions.
• Support exposure management with reporting and owner engagement; remediation remains with asset owners.
• Carry out security checks and provide risk-based guidance.
• Contribute to security projects, documentation, and metrics.
• Participate in paid on-call rota for high-severity incidents.

Skills

SOC operations

Incident response

Log analysis

SIEM/EDR usage

Threat hunting

Investigation docs

On-call readiness

Cross-team collaboration

Education

Cybersecurity degree

CompTIA CySA+

MS Security Operations Analyst

Security Blue Team certs

Tools

SIEM platforms

EDR/XDR tools

Cloud security tooling

Forensics tools

Job description

PA Consulting is seeking a Security Operations Centre professional to join our Group Systems Security Operations Centre (SOC). The role monitors the technology estate, investigates security incidents, hunts threats, and continually improves detections, controls and practices.

Hybrid work model with 2–3 days in the office. You will analyse alerts across SIEM/EDR, triage incidents, coordinate containment, document investigations clearly, and collaborate with asset owners and cross-functional