Senior Security Operations Analyst

Rackspace Technology; Cardiff; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading cloud technology provider in the UK is seeking a Senior Security Operations Analyst to enhance its Security Operations Centre. This key role involves leading the analysis of security alerts, shaping security operations, and mentoring team members. Ideal candidates will have strong experience in SOC environments and relevant security tooling. This position offers the opportunity to solve complex security challenges and requires a deep understanding of cloud and onsite security practices. Join our dynamic team to protect critical systems and data.

Qualifications

• 5+ years of experience in security operations or related field.
• Strong background in incident response and threat detection.
• Ability to analyze complex security data and detect anomalies.

Responsibilities

• Lead analysis of security alerts and telemetry from various sources.
• Identify sophisticated attack patterns and indicators of compromise.
• Continuously refine detection logic and correlation rules.

Skills

Cloud and onsite security tooling

Qualys

IDS/IPS Experience

Python

PowerShell

MITRE ATT&CK Experience

SOC Experience

Tools

FortiSIEM

Solarwinds Security Monitor

Job description

Rackspace Technology is a leading provider of expertise and managed services across all the major public and private cloud technologies. We’ve evolved Fanatical Support to encompass the entire customer journey — providing Fanatical Experience™ from first consultation to daily operations. Our passionate experts combine the power of proactive, always-on service and expertise with best-in‑class tools and automation to deliver technology when and how our customers need it.

We are seeking a highly experienced and proactive Senior Security Operations Analyst to join our Security Operations Centre (SOC). This role is central to protecting Sovereign Cloud Customer’s critical systems, data, and services from cyber threats.

As a senior member of the team, you will lead advanced threat detection, incident response, and continuous monitoring activities, while also shaping the evolution of our security operations capabilities over both project based and business as usual work. You will act as a technical authority within the SOC, providing mentorship, driving improvements in tooling and processes, and collaborating with teams across the business to strengthen our overall security posture.

This role is ideal for someone who thrives in a fast‑paced environment, enjoys solving complex security challenges, and is passionate about staying ahead of emerging threats.

On a daily basis, you will:

• Lead the analysis of security alerts, logs, and telemetry from SIEM, EDR, network sensors, cloud platforms, and threat‑intelligence sources.
• Identify sophisticated attack patterns, anomalous behaviours, and indicators of compromise & continuously refine detection logic, correlation rules.
• Alert thresholds to reduce noise and improve accuracy.

Required skills

• Cloud and onsite security tooling (must have)
• Qualys (must have)
• FortiSIEM (desired)
• Solarwinds Security Monitor (desired)
• IDS/IPS Experience (must have)Python / Powershell Experience (must have)
• MITRE ATT&CK Experience (must have)
• SOC Experience (must have)

Discover your inner Racker - click here