Remote 24/7 SOC Analyst - Threat Hunting & IR

Nomios Group; Basingstoke; Hybrid; GBP 45,000 - 65,000; Full time

Job summary

Nomios Group is recruiting a seasoned Security Operations Centre (SOC) Analyst for our UK-based 24/7 SOC. The role involves monitoring, investigating and escalating security events across multiple customer environments with hands-on SOC experience.

You will work in a modern SOC environment, using platforms such as Microsoft Sentinel, Defender, XSIAM/XSOAR, and supported by a collaborative team. The start date is January 2027, with a home-based position and occasional visits to Basingstoke.

Qualifications

• Hands-on SOC experience in a 24/7 environment.
• MSP/MSSP background with multiple customer environments preferred.
• Experience triaging and investigating across SIEM/EDR/XDR platforms.
• Understanding attacker behaviours, TTPs and malware execution chains.
• Ability to read Windows event logs and network telemetry.
• Familiarity with MITRE ATT&CK during investigations or detections.

Responsibilities

• Monitor and triage alerts across SIEM, EDR or XDR and email/web security platforms.
• Investigate suspicious activity and determine escalation needs.
• Follow SOC runbooks and investigation workflows.
• Build clear investigation timelines and notes.
• Escalate complex cases to Senior/Lead Analysts with context.
• Review vulnerability outputs and provide prioritisation insights.

Skills

Hands-on SOC experience

MSP/MSSP background

SOC platforms

Threat monitoring

Tools

Microsoft Sentinel

Defender

XSIAM

XSOAR

SentinelOne

CrowdStrike

Google SecOps

Job description

Nomios Group is recruiting a seasoned Security Operations Centre (SOC) Analyst for our UK-based 24/7 SOC. The role involves monitoring, investigating and escalating security events across multiple customer environments with hands-on SOC experience.

You will work in a modern SOC environment, using platforms such as Microsoft Sentinel, Defender, XSIAM/XSOAR, and supported by a collaborative team. The start date is January 2027, with a home-based position and occasional visits to Basingstoke.