Security Operations Center Analyst

Experis UK; Hursley; On-site; GBP 60,000 - 90,000; Full time

Job summary

Experis UK is seeking a technically strong Technical Consultant – Threat Detection, Response & Intelligence to join our security operations capability. You will monitor, investigate and respond to cyber threats, helping protect critical systems and improve the organisation’s security posture.

This role is geared towards experienced SOC professionals who combine hands-on technical skills with analytical thinking and clear communication.

Qualifications

• Minimum of 5 years of UK residency.
• SC-200 certification mandatory.
• Practical experience with SIEM technologies and security tooling.
• Solid understanding of IT infrastructure and networking.
• Understanding of vulnerability and threat management.
• Knowledge of the incident response lifecycle.

Responsibilities

• Monitor, triage and investigate security alerts and events across SIEM and wider security tooling.
• Identify suspicious activity, indicators of compromise and potential security incidents.
• Conduct initial incident investigations, assess severity and impact, and elevate appropriately with clear supporting evidence.
• Support the full incident response lifecycle, including containment, remediation and post-incident learning.
• Use threat intelligence to strengthen detection, investigation and response activities.
• Contribute to threat monitoring, reporting and trend analysis.
• Tune detection rules and analytics to reduce false positives and improve detection quality.
• Support continual service improvement across security monitoring and response processes.
• Work collaboratively with security, infrastructure and wider technology teams, while also managing independent workstreams effectively.

Skills

UK residency

SOC experience

Threat detection

Incident response

Threat intelligence

Team collaboration

Education

SC-200 Certification

Tools

QRadar

Microsoft Sentinel

LogRhythm Security Analytics

Job description

Location: UK

Security clearance: minimum of 5 years’ UK residency required

Certification: Microsoft Certified: Security Operations Analyst Associate (SC-200) is mandatory

We are seeking a technically strong and proactive Technical Consultant – Threat Detection, Response & Intelligence to join our security operations capability. You will play a key role in monitoring, investigating and responding to cyber threats, helping protect critical systems and improving the organisation’s overall security posture.

This is an excellent opportunity for an experienced SOC or security operations professional who combines hands‑on technical expertise with strong analytical thinking, clear communication and a genuine interest in threat management. The SC-200 certification validates expertise in investigating, mitigating and responding to threats using Microsoft security technologies, including Sentinel and Defender tooling.

What you’ll do

• Monitor, triage and investigate security alerts and events across SIEM and wider security tooling.
• Identify suspicious activity, indicators of compromise and potential security incidents.
• Conduct initial incident investigations, assess severity and impact, and elevate appropriately with clear supporting evidence.
• Support the full incident response lifecycle, including containment, remediation and post-incident learning.
• Use threat intelligence to strengthen detection, investigation and response activities.
• Contribute to threat monitoring, reporting and trend analysis.
• Tune detection rules and analytics to reduce false positives and improve detection quality.
• Support continual service improvement across security monitoring and response processes.
• Work collaboratively with security, infrastructure and wider technology teams, while also managing independent workstreams effectively.

What we’re looking for

• minimum of 5 years’ UK residency.
• Microsoft Certified: Security Operations Analyst Associate (SC-200) — mandatory.
• Practical experience with SIEM technologies and security tooling.
• Solid understanding of IT infrastructure and networking.
• Understanding of vulnerability and threat management.
• Knowledge of the incident response lifecycle.
• Strong team-working skills alongside the ability to work independently.
• Adaptable and resilient in a fast‑paced, changing workload.
• Genuine interest in cyber security, threat detection and threat management.
• Protective Monitoring or SOC experience.
• Hands‑on experience with SIEM platforms such as QRadar, Microsoft Sentinel or LogRhythm Security Analytics.
• Experience in incident investigation, triage and escalation.
• Threat monitoring and response experience.
• Trend reporting and security analytics.
• Detection rule tuning and continual service improvement.