SC-Cleared SOC Analyst: MS Sentinel & Defender (Hybrid)

Head Resourcing Ltd; Harlow; On-site; GBP 65,000 - 101,000; Full time

Benefits offered by this job

Hybrid work arrangement

Job summary

Head Resourcing Ltd is seeking an experienced SOC Analyst Consultant for a 3-month contract in Harlow. The role requires SC clearance and a hybrid setup (1 day onsite per week initially, potential for remote work after week one).

You will monitor, triage, and investigate security incidents using SIEM (Microsoft Sentinel) and Defender, with emphasis on incident response and root-cause analysis in a large enterprise environment.

Qualifications

• Demonstrable experience as a SOC Analyst.
• Hands-on with SIEM, especially Microsoft Sentinel.
• Experience monitoring, triaging, and investigating security incidents.
• Knowledge of incident response lifecycle and root cause analysis.
• Experience with Microsoft Defender is essential.
• KQL knowledge is desirable.
• Ability to work independently on complex cyber investigations.

Responsibilities

• Monitor, triage, and investigate security incidents.
• Respond to incidents following lifecycle and perform root-cause analysis.
• Collaborate with the enterprise security team during investigations.
• Maintain awareness of MITRE ATT&CK, Cyber Kill Chain, and NIST CSF.
• Contribute to post-incident analysis and remediation recommendations.

Skills

SOC Analyst experience

SIEM, Microsoft Sentinel

Incident monitoring & triage

Incident response lifecycle

Microsoft Defender

KQL knowledge

Independent investigations

Tools

IBM QRadar

Microsoft Defender

Microsoft Sentinel

Azure AD / Entra ID

Email threat response

Job description

Head Resourcing Ltd is seeking an experienced SOC Analyst Consultant for a 3-month contract in Harlow. The role requires SC clearance and a hybrid setup (1 day onsite per week initially, potential for remote work after week one).

You will monitor, triage, and investigate security incidents using SIEM (Microsoft Sentinel) and Defender, with emphasis on incident response and root-cause analysis in a large enterprise environment.