Security Analyst II

Tesco PLC; Welwyn Garden City; Híbrido; GBP 50.000 - 75.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Bonus up to 20%

Private medical insurance

Holiday 25 days + personal day

Descripción de la vacante

Tesco PLC in the United Kingdom is seeking a Security Analyst II to join our SOC. You will perform hands-on investigations, monitor security events, and drive rapid containment of incidents using advanced queries and SIEM/XDR tools.

You will leverage Windows and Linux knowledge, threat hunting, and collaboration with Incident Managers to improve detection, playbooks, and automation. We value clear reporting to both technical and non-technical audiences.

Formación

• 2+ years' experience in SOC operations or equivalent security monitoring role.

Responsabilidades

• Monitor and analyse security events using Security platforms, applying advanced queries to identify and validate threats.

Conocimientos

2+ years SOC ops

Investigative & analytical

SIEM/XDR proficiency

Advanced querying (KQL, SPL)

OS knowledge (Windows, Linux)

Incident response frameworks (NIST, AT

Multitasking under pressure

Strong communication

Scripting (Python, PowerShell)

Herramientas

PowerShell

Python

KQL

SPL

Descripción del empleo

As a Security Analyst II, you will play a critical hands‑on role within the SOC, delivering high-quality investigations and proactive monitoring to protect the organisation from evolving threats. This position demands strong analytical capability, investigative depth, and technical expertise to solve complex challenges under pressure. You will leverage your knowledge of operating systems, networking, and security principles to identify, analyse, and contain threats quickly and effectively. You will use advanced querying and technical skills to uncover patterns, validate alerts, and drive improvements in detection and response. You will act as a trusted member of the SOC team, collaborating with peers and partners to strengthen detection and response capabilities. Beyond day‑to‑day operations, you will contribute to process improvements, automation initiatives, and SOC maturity objectives. What is in it for you We're all about the little helps. That's why we make sure our Tesco colleague benefits package takes care of you - both in and out of work.

Benefits

• Annual bonus scheme of up to 20% of base salary.
• Holiday starting at 25 days plus a personal day (plus Bank holidays).
• Private medical insurance.
• 26 weeks maternity and adoption leave (12 months service required at the qualifying date) at full pay, followed by 13 weeks of Statutory Maternity Pay or Statutory Adoption Pay, we also offer 6 weeks fully paid paternity leave.
• Free 24/7 virtual GP service, Employee Assistance Programme (EAP) for you and your family, free access to a range of experts to support your mental wellbeing.

The above information is a shortened summary, refer to our policies for full details.

Responsibilities

• Monitor and analyse security events using Security platforms, applying advanced queries to identify and validate threats.
• Deliver accurate and timely investigative analysis, ensuring rapid containment and remediation of incidents.
• Act as a key responder during active incidents, applying technical knowledge to diagnose root causes and mitigate impact.
• Conduct proactive threat hunting to uncover unknown threats and strengthen early detection capabilities.
• Utilise deep understanding of operating systems, networking protocols, and security principles to resolve complex challenges.
• Maintain situational awareness of emerging attacker techniques, vulnerabilities, and threat trends.
• Support development and optimisation of SOC playbooks, processes, and automation use cases.
• Collaborate with Incident Managers, Threat Intelligence, and other teams for unified response and knowledge sharing.
• Produce clear, actionable reports for technical and non-technical audiences.

Requirements

• 2+ years' experience in SOC operations or equivalent security monitoring role.
• Strong investigative and analytical skills with proven ability to handle complex incidents under pressure.
• Proficiency in SIEM/XDR platforms and advanced querying (e.g., KQL, SPL) for threat detection and analysis.
• Solid understanding of operating systems (Windows, Linux), networking concepts (TCP/IP, DNS), and security fundamentals.
• Familiarity with incident response frameworks (e.g., NIST, MITRE ATT&CK).
• Ability to prioritise and manage multiple cases concurrently in high-stakes environments.
• Strong communication skills for technical and non-technical stakeholders.
• Experience with scripting languages (e.g., Python, PowerShell).

You might know us as a supermarket, technology company or even for our award-winning mobile network. Truth is, we're all of those things, and much more. Our colleagues work with one goal in mind, helping to make every day a little better for our customers, colleagues and communities all over the world. No two customers are the same, neither are our colleagues.

At Tesco, we champion a balance that lets you thrive both in and out of work. Spend 60% of your week collaborating with colleagues at our office locations or local sites and the rest remotely. Whether you're just kicking off your career, juggling passions, or navigating big life events, we're here to support you. We always welcome a conversation about flexible working, so talk to us throughout your application about how we can support. We're proud to be an accredited Disability Confident Leader, where everyone's welcome. That's why we commit to providing a fully inclusive and accessible recruitment process. When you join us in this role, you'll be employed by Tesco Stores Limited, the Tesco legal entity responsible for your employment.