Security Operations Center Analyst

TRIA; West of England; Hybrid; GBP 21,000 - 35,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

TRIA in Bristol is seeking an experienced Senior SOC Analyst to join our security operations team on a hybrid basis. You will monitor priority incidents, act as the first escalation point for SOC Analysts and coordinate incident response across client environments.

You will work with Microsoft Defender XDR, Microsoft Sentinel, and related technologies, refining detections, maintaining runbooks and the KQL library, and mentoring junior analysts to strengthen security operations for a diverse

Qualifications

• Strong experience in a security operations or analytical role.
• Hands-on expertise with Microsoft Defender and Microsoft Sentinel.
• Advanced KQL skills and a strong understanding of Log Analytics.
• Broad knowledge of the Microsoft security stack.
• Strong written and verbal communication skills, including confidence communicating with clients during high-priority incidents.
• Python, Bicep, ARM templates or JSON.
• Microsoft or security certifications such as SC-300, SC-900, AZ-900, Security+, Network+ or A+.
• Previous experience mentoring junior analysts.

Responsibilities

• Monitor priority incidents and ensure SLAs are met.
• Act as the first escalation point for SOC Analysts.
• Investigate and respond to security incidents when required.
• Escalate complex incidents with clear, detailed findings.
• Support incident response, client communications and incident bridges.
• Maintain runbooks, internal documentation and the KQL library.
• Tune detections and manage improvement requests through Azure DevOps.

Skills

Security operations

Analytical skills

Microsoft Defender

Microsoft Sentinel

KQL

Log Analytics

Microsoft security stack

Communication skills

Python

Bicep

ARM templates

JSON

Mentoring junior analysts

Education

SC-300

SC-900

AZ-900

Security+

Network+

A+

Tools

Azure DevOps

KQL library

Job description

Salary: £21,000 - 35,000 per year

Requirements

• Strong experience in a security operations or analytical role
• Hands-on expertise with Microsoft Defender and Microsoft Sentinel
• Advanced KQL skills and a strong understanding of Log Analytics
• Broad knowledge of the Microsoft security stack
• Strong written and verbal communication skills, including confidence communicating with clients during high-priority incidents
• Python, Bicep, ARM templates or JSON
• Microsoft or security certifications such as SC-300, SC-900, AZ-900, Security+, Network+ or A+
• Previous experience mentoring junior analysts

Responsibilities

• Monitor priority incidents and ensure SLAs are met
• Act as the first escalation point for SOC Analysts
• Investigate and respond to security incidents when required
• Escalate complex incidents with clear, detailed findings
• Support incident response, client communications and incident bridges
• Maintain runbooks, internal documentation and the KQL library
• Tune detections and manage improvement requests through Azure DevOps

Technologies

• ARM
• Azure
• Support
• JSON
• Network
• Python
• Security
• Cloud
• DevOps

More

We are a Microsoft-focused technology consultancy seeking an experienced Senior SOC Analyst to join our security operations team in Bristol on a hybrid basis. The role is permanent with a salary of £65,000. You will work primarily within Microsofts Unified Security Operations Platform, including Microsoft Defender XDR and Microsoft Sentinel, helping us manage incidents, support junior analysts and strengthen security operations for a range of clients. We are committed to creating an inclusive workplace and welcome applications from candidates of all backgrounds.