Senior Security Analyst (L3 SOC Analyst)

inchcape; Greater London; On-site; GBP 70,000 - 110,000; Full time

Job summary

Inchcape is seeking a Senior Security Analyst (L3 SOC) to serve as the senior technical escalation point in the Global Cyber Security team. You will drive detection engineering, threat hunting, automation and incident response across global operations.

You will lead major incident responses, design detection capabilities, and mentor SOC staff in a fast-paced, collaborative environment focused on strengthening security maturity and resilience.

Qualifications

• Significant experience in a senior SOC environment, including L3 analyst, IR, threat hunting or detection engineering.
• Deep knowledge of SIEM, EDR, SOAR, cloud security, identity security, endpoint security and enterprise monitoring.
• Proven experience leading investigations and complex cyber security incidents.
• Strong detection engineering and threat hunting capabilities, including MITRE ATT&CK.
• Experience developing security automation and orchestration workflows.

Responsibilities

• Act as the senior technical escalation point for high-severity cyber security incidents and guide investigations.
• Lead technical response to major incidents, coordinating containment, eradication and recovery with stakeholders.
• Design and optimise detection rules, threat models and monitoring across SIEM, EDR and cloud security.
• Conduct proactive threat hunting using threat intelligence and analytics.
• Develop security automation and SOAR playbooks to improve efficiency and response.
• Mentor and support SOC analysts to strengthen detection engineering and IR practices.

Skills

Senior SOC experience

SIEM/EDR/SOAR

Threat hunting

Security automation

Mentoring

Communication

Tools

MITRE ATT&CK

Job description

Select how often (in days) to receive an alert:

Senior Security Analyst (L3 SOC Analyst)

Do you want to help protect a global organisation from evolving cyber threats while shaping the future of cyber security operations? At Inchcape, we're pursuing an exciting strategy to transform our global business and accelerate our industry towards a low-carbon, sustainable future.

This role is part of Inchcape's Global Cyber Security team, supporting our worldwide operations through advanced security monitoring, threat detection and incident response capabilities. You'll play a critical role in protecting our people, systems and data, working alongside highly skilled security professionals in a collaborative and fast-paced environment.

As Senior Security Analyst, you'll operate in an L3 Security Operations Centre (SOC) capacity, serving as the senior technical escalation point for complex cyber security incidents and advanced threat investigations. You'll drive continuous improvement across detection engineering, threat hunting, automation and incident response capabilities, helping strengthen Inchcape's cyber resilience and security maturity.

This is a unique opportunity to combine deep technical expertise with strategic influence, working across global teams to enhance security operations, implement innovative solutions and defend against emerging threats.

What You'll Do

• Act as the senior technical escalation point for high-severity and complex cyber security incidents, providing expert analysis and guidance throughout investigations.
• Lead the technical response to major incidents, coordinating containment, eradication and recovery activities with internal and external stakeholders.
• Design, develop and optimise detection rules, threat models and advanced monitoring capabilities across SIEM, EDR and cloud security platforms.
• Conduct proactive threat hunting activities using threat intelligence, behavioural analytics and industry frameworks to identify previously undetected threats.
• Develop and enhance security automation and SOAR playbooks to improve operational efficiency, response capability and analytical effectiveness.
• Mentor and support SOC analysts while contributing to the ongoing maturity of detection engineering, incident response and security operations practices.

About You

To be successful in this role, you'll bring extensive cyber security operations experience, strong technical expertise and a passion for continuous improvement in a global security environment. You'll demonstrate:

• Significant experience operating in a senior SOC environment, including working in an L3 analyst, incident response, threat hunting or detection engineering capacity.
• Deep technical knowledge of SIEM, EDR, SOAR, cloud security, identity security, endpoint security and enterprise monitoring platforms.
• Proven experience leading the investigation and response to complex cyber security incidents and acting as a senior technical decision-maker.
• Strong detection engineering and threat hunting capabilities, including experience with frameworks such as MITRE ATT&CK.
• Experience developing security automation, orchestration workflows and process improvements that enhance SOC effectiveness.
• Excellent communication, stakeholder management and mentoring skills, with the ability to explain complex technical concepts to both technical and non‑technical audiences.

Opportunity for everyone

At Inchcape, inclusion accelerates our success. We are committed to creating a workplace where everyone feels valued, heard, and empowered to thrive. We foster an inclusive culture that reflects the communities we serve, ensuring opportunities for all. Click here to learn more about our commitment to Inclusion and Diversity.

About us

Inchcape is the leading global automotive distributor operating in markets. We partner with some of the biggest brands in the business to sustainably power better mobility today and in the future.

Our diverse global team of over 16,000 talented colleagues foster an inclusive and collaborative culture, delivering a brilliant experience for our customers and partners. We’re a dynamic and fast‑growing business, driving the transformation of our industry and redefining tomorrow. Find out more visit www.inchcape.com

Additional information request

Selected candidates will be contacted to initiate our hiring journey. We may request additional information from applicants to better understand your background, qualifications and experience for the role.

For any technical support please email to [e-mail]