Security Operations Center Analyst (L2)

SecurityHQ Ltd.; Greater London; Ibrido; GBP 50.000 - 80.000; Tempo pieno

Descrizione del lavoro

SecurityHQ Ltd. is seeking an experienced SOC Analyst to own incident response from initial detection through to resolution. You’ll investigate alerts across SIEM, EDR, email, cloud and identity while engaging directly with customers and coordinating with SOC and Engineering teams.

Based at our Blackfriars office, the role offers hybrid working with three days on site. You’ll develop expertise in incident response, threat hunting and security operations within a global cybersecurity context.

Competenze

• Experience working within a SOC, MDR or Cyber Security Operations environment.
• Experience investigating and responding to security incidents rather than solely monitoring or triaging alerts.
• Hands-on experience analysing threats such as phishing, account compromise, malware, ransomware and endpoint attacks.
• Good understanding of attacker tactics, techniques and procedures, including frameworks such as MITRE ATT&CK.
• Experience working with Microsoft security technologies, including Microsoft Defender and Microsoft Sentinel.
• Ability to analyse logs, alerts and user activity to build a clear understanding of security incidents.
• Strong communication skills with the confidence to engage directly with customers.
• A proactive, inquisitive mindset and genuine passion for cyber security.
• Ability to manage multiple investigations in a fast-paced environment.
• Experience producing clear incident reports and root cause analysis documentation.

Mansioni

• Investigate and respond to security incidents across SIEM, EDR, email, cloud, identity and network platforms.
• Take ownership of incidents from initial alert through to containment, remediation and resolution.
• Engage directly with customers, providing updates, recommendations and guidance throughout investigations.
• Analyse logs, alerts and system activity to determine root cause, impact and attack methodology.
• Conduct proactive threat hunting activities using threat intelligence and indicators of compromise (IOCs).
• Review and enhance detection rules, use cases and alert fidelity to improve threat visibility.
• Support major incident response activities and post-incident reviews.
• Produce high-quality incident reports, documentation and root cause analysis.
• Collaborate with SOC, Engineering and Cyber Security teams to resolve incidents effectively.
• Contribute to process improvements and initiatives that strengthen our clients' overall security posture.

Conoscenze

SOC operations

Incident response

Threat hunting

MITRE ATT&CK

Microsoft Defender

Microsoft Sentinel

Log analysis

Customer communication

Multi-tasking

Documentation

Strumenti

Microsoft Defender

Microsoft Sentinel

Descrizione del lavoro

You've built a solid foundation in a SOC environment and know what it takes to investigate alerts, identify threats and support incident response. Now you're ready for the next step.

This is an opportunity to move beyond monitoring and escalation, taking ownership of security incidents from initial detection through to resolution. You'll work directly with customers, investigate real-world cyber threats and play an integral role in protecting organisations across the globe.

Working as part of our Security Operations team, you'll be given the autonomy to make decisions, lead investigations and develop your expertise across incident response, threat hunting and security operations. You'll gain exposure to a wide range of technologies and attack techniques while working alongside experienced cybersecurity professionals who will support your continued development.

This role is based 3 days a week from our Blackfriars office.

About SecurityHQ

SecurityHQ is a global cybersecurity company. Our specialist teams design, engineer and manage solutions that do three things: Promote clarity and trust in a complex world. Build momentum around improving security posture. And increase the value of cybersecurity investment within organizations.

Free from limitations, and inclusive of all requirements, we focus on defending today, while mitigating the risks of tomorrow. And into the future. Our solutions are tailored to our customers and their unique context. Around the clock, 365 days per year, our customers are never alone.

SecurityHQ – We’re focused on engineering cybersecurity, by design.

Responsibilities

• Investigate and respond to security incidents across SIEM, EDR, email, cloud, identity and network platforms
• Take ownership of incidents from initial alert through to containment, remediation and resolution
• Engage directly with customers, providing updates, recommendations and guidance throughout investigations
• Analyse logs, alerts and system activity to determine root cause, impact and attack methodology
• Conduct proactive threat hunting activities using threat intelligence and indicators of compromise (IOCs)
• Review and enhance detection rules, use cases and alert fidelity to improve threat visibility
• Support major incident response activities and post-incident reviews
• Produce high-quality incident reports, documentation and root cause analysis
• Collaborate with SOC, Engineering and Cyber Security teams to resolve incidents effectively
• Contribute to process improvements and initiatives that strengthen our clients' overall security posture

What We're Looking For

• Experience working within a SOC, MDR or Cyber Security Operations environment
• Experience investigating and responding to security incidents rather than solely monitoring or triaging alerts
• Hands-on experience analysing threats such as phishing, account compromise, malware, ransomware and endpoint attacks
• Good understanding of attacker tactics, techniques and procedures, including frameworks such as MITRE ATT&CK
• Experience working with Microsoft security technologies, including Microsoft Defender and Microsoft Sentinel
• Ability to analyse logs, alerts and user activity to build a clear understanding of security incidents
• Strong communication skills with the confidence to engage directly with customers
• A proactive, inquisitive mindset and genuine passion for cyber security
• Ability to manage multiple investigations in a fast-paced environment
• Experience producing clear incident reports and root cause analysis documentation