Security Operations Analyst – UK

Rootedsec; United Kingdom; Remote; GBP 62,000 - 71,000; Full time

Job summary

Huntress is seeking a Security Operations Analyst for a fully remote UK role within the 24/7 SOC. You will investigate EDR telemetry, forensic artifacts and malware across Windows, Linux and macOS, with involvement in cloud/Microsoft 365 investigations and detection improvements.

The role requires 2+ years in a SOC/DFIR environment, familiarity with MITRE ATT&CK, and strong malware analysis capabilities, plus Windows admin and networking basics. Remote within the UK.

Qualifications

• 2+ years in a SOC or DFIR role.
• Familiarity with Windows, Linux and macOS attack surfaces.
• Familiarity with attacker tools and MITRE ATT&CK.
• Static and dynamic malware analysis.
• Windows administration and networking fundamentals.

Responsibilities

• Triage, investigate and respond to platform alerts.
• Review EDR/SIEM telemetry and forensic artifacts to find root cause.
• Perform tactical malware analysis.
• Investigate suspicious Microsoft 365 / cloud activity.
• Contribute to detection creation and tuning.

Skills

SOC experience

DFIR

Windows

Linux

macOS

MITRE ATT&CK

Malware analysis

EDR/SIEM

Networking fundamentals

Remote UK

Job description

Open roleHuntress# Security Operations Analyst – UKRemote, United Kingdom· REMOTEHacker+ signal## HuntressFully remote UK analyst in Huntress's 24/7 SOC investigating endpoint, identity and cloud threats.Type: FULLTIMERange: GBP 62,000–70,500 base per yearMode: REMOTEMinimum rank: Hacker## About the roleThe analyst responds to alerts in a 24/7 SOC, investigating EDR telemetry, forensic artifacts and malware across Windows, Linux and macOS. The role also covers cloud and Microsoft 365 investigations and contributes to detection improvements.### What you will do* Triage, investigate and respond to platform alerts* Review EDR/SIEM telemetry and forensic artifacts to find root cause* Perform tactical malware analysis* Investigate suspicious Microsoft 365 / cloud activity* Contribute to detection creation and tuning### What they ask for* 2+ years in a SOC or DFIR role* Knowledge of Windows, Linux and macOS attack surfaces* Familiarity with attacker tools and MITRE ATT&CK* Static and dynamic malware analysis* Windows administration and networking fundamentals* Remote within the UK### Nice to have* MSP/MSSP/MDR experience* Linux and macOS investigation skills* Scripting (PowerShell, Python, Bash, etc.)* HackTheBox, TryHackMe or Blue Team Labs Online* CTF or CCDC participation## What applying with Rooted meansThis role accepts applications with Rooted context. Instead of sending only a resume, you can attach a verifiable credential with your proofs, rank, and technical evidence.Your application includes your Rooted credential: rank, verified proofs, and supporting evidence.You can read this role without an account. To apply you need a Rooted credential.Create Professional profileSee every open security roleThis role is curated by Rooted. Rooted is not the hiring company unless explicitly stated. The hiring company is Huntress. Confirm the final details with the original source or during the application process.Posted 2026-08-07