Security Operations Center Analyst

Anson McCade; Greater London; On-site; GBP 50,000 - 70,000; Full time

Job summary

Anson McCade is seeking an experienced SOC Analyst to join a 24/7 security operations center in London. You will investigate escalated incidents, lead response activities, and work with technical stakeholders to protect critical systems powering AI and high-performance computing platforms.

The role requires a 3+ year background in SOC/IR, strong SIEM/EDR experience, and a Bachelor's in Cybersecurity or related field.

Qualifications

• 3+ years' commercial experience within a SOC, Incident Response or Threat Analysis environment.
• Strong understanding of cybersecurity operations, incident response methodologies and threat investigations.
• Hands-on experience with SIEM and EDR platforms.
• Knowledge of malware behaviour, attack techniques and threat detection.
• Excellent analytical and problem-solving skills.
• Bachelor's degree in Cybersecurity, Computer Science or a related discipline.

Responsibilities

• Investigate and analyse escalated security incidents, identifying attack vectors, root causes and potential business impact.
• Correlate events across multiple security tools and data sources to build comprehensive incident timelines.
• Lead response activities for medium and high-severity security incidents.
• Support containment, eradication and recovery efforts in partnership with technical stakeholders.
• Produce detailed incident reports and recommendations.
• Tune and optimise SIEM and detection rules to improve threat visibility.
• Identify opportunities to strengthen detection capabilities, processes and response playbooks.
• Provide mentoring and technical guidance to junior SOC analysts.
• Participate in security exercises, simulations and continuous improvement initiatives.
• Work as part of a 24/7 shift-based SOC function.

Skills

SOC operations

Incident response

Threat analysis

SIEM

EDR

Malware analysis

Mentoring

Analytical skills

Education

Bachelor's degree in Cybersecurity

Tools

SIEM

EDR

Job description

Security Clearance: Must be eligible for UK Security Clearance

This is an exciting opportunity to work within a 24/7 SOC, investigating sophisticated cyber threats, leading incident response activities, and helping protect critical infrastructure powering next-generation AI and high-performance computing platforms.

What You\'ll Be Doing

• Investigate and analyse escalated security incidents, identifying attack vectors, root causes and potential business impact.
• Correlate events across multiple security tools and data sources to build comprehensive incident timelines.
• Lead response activities for medium and high-severity security incidents.
• Support containment, eradication and recovery efforts in partnership with technical stakeholders.
• Produce detailed incident reports and recommendations.
• Tune and optimise SIEM and detection rules to improve threat visibility.
• Identify opportunities to strengthen detection capabilities, processes and response playbooks.
• Provide mentoring and technical guidance to junior SOC analysts.
• Participate in security exercises, simulations and continuous improvement initiatives.
• Work as part of a 24/7 shift-based SOC function.

What We\'re Looking For

• 3+ years\' commercial experience within a SOC, Incident Response or Threat Analysis environment.
• Strong understanding of cybersecurity operations, incident response methodologies and threat investigations.
• Hands-on experience with SIEM and EDR platforms.
• Knowledge of malware behaviour, attack techniques and threat detection.
• Excellent analytical and problem-solving skills.
• Bachelor\'s degree in Cybersecurity, Computer Science or a related discipline.

If you\'re an experienced SOC Analyst ready to take ownership of complex cyber incidents, mentor junior analysts and work within a highly secure, mission-critical environment, we\'d love to hear from you.