L3 SOC Analyst

JR United Kingdom; Newbury; On-site; GBP 50,000 - 70,000; Full time

Job summary

Join a leading Cyber Operations Team as a Level 3 SOC Analyst in Newbury. In this mission-critical role, you'll lead incident investigations, perform advanced threat analysis, and mentor junior analysts. This position offers a chance to make a significant impact in global cyber defence.

Qualifications

• 4+ years’ experience in SOC (Level 2 or above).
• Proven ability to investigate high-severity incidents.
• Strong technical knowledge of TCP/IP, OSI model, Windows/Linux.

Responsibilities

• Lead incident investigations and ensure accurate triage.
• Perform deep-dive analysis to uncover root causes.
• Mentor junior analysts and foster knowledge-sharing.

Skills

Incident Response

Analytical Precision

Modern Attack Vectors

Communication Skills

Tools

SIEM

EDR

SOAR

Scripting

Job description

Social network you want to login/join with:

Play a Critical Role in Global Cyber Defence – Join a Leading Cyber Operations Team!

Location: Newbury – 2 Days On-Site

Type: Permanent

Are you an experienced SOC Analyst looking to make a real impact in defending against high-severity cyber threats? This is a mission-critical role within a world-class Cyber Defence Operations team protecting global systems and infrastructure.

As a Level 3 SOC Analyst, you will take the lead in investigating and supporting major incidents, performing advanced analysis to ensure no malicious activity is missed. You’ll act as both a technical expert and a mentor—guiding junior analysts, tuning tools for maximum detection capability, and reporting on risks with precision.

Key Responsibilities

• Lead Incident Investigations – Take ownership of high-severity security incidents, ensuring complete and accurate triage
• Advanced Threat Analysis – Perform deep-dive analysis to uncover root causes, residual risks, and stealthy attack vectors
• Mentor and Guide – Support junior analysts with expertise and foster knowledge-sharing across the SOC
• EDR-Centric Response – Work extensively with EDR tools (primary alert source) to detect and analyse modern threats
• Fine-Tuning & Reporting – Tune SIEM and SOAR systems for accuracy, and deliver clear, actionable incident reports
• Technical Threat Intelligence – Stay ahead of emerging attack vectors, especially those identified via EDR; apply this insight to investigations and tuning efforts

What You’ll Bring

• 4+ years’ experience in SOC (Level 2 or above), with strong incident response capabilities
• Proven ability to investigate high-severity incidents with analytical precision and attention to detail
• In-depth understanding of modern attack vectors, especially those surfaced via EDR platforms
• Proficiency with SIEM (e.g., Splunk, ArcSight), EDR (e.g., Defender, FireEye), and supporting security tools
• Strong technical knowledge of TCP/IP, OSI model, Windows/Linux, and cloud environments (Azure, AWS, O365)
• Familiarity with SOAR and scripting for automation (Kusto, SQL, Regex)
• Excellent communication skills and a proactive, composed approach under pressure

Join a team that’s reshaping cyber defence strategy on a global scale. If you’re ready to lead from the front and drive meaningful impact in a high-stakes environment—apply today.