Senior Security Operations Analyst

Rackspace; Cardiff; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading cloud services provider in Cardiff is seeking a highly experienced Senior Security Operations Analyst to join their Security Operations Centre. This role involves leading advanced threat detection, incident response, and monitoring activities. The ideal candidate will possess strong skills in various security tools, particularly in cloud and onsite security, and have a passion for solving complex security challenges. The position offers the opportunity to improve security processes and mentor team members.

Qualifications

• Experience with cloud and onsite security tooling.
• Proficient in Qualys and IDS/IPS.
• Strong skills in Python or Powershell.

Responsibilities

• Lead the analysis of security alerts, logs, and telemetry.
• Identify attack patterns and refine detection logic.
• Collaborate with business teams to improve security posture.

Skills

Cloud and onsite security tooling

Qualys

IDS/IPS Experience

Python / Powershell Experience

MITRE ATT&CK Experience

SOC Experience

Tools

FortiSIEM

Solarwinds Security Monitor

Job description

Rackspace Technology is a leading provider of expertise and managed services across all the major public and private cloud technologies. We’ve evolved Fanatical Support to encompass the entire customer journey — providing Fanatical Experience™ from first consultation to daily operations. Our passionate experts combine the power of proactive, always‑on service and expertise with best‑in‑class tools and automation to deliver technology when and how our customers need it.

We are seeking a highly experienced and proactive Senior Security Operations Analyst to join our Security Operations Centre (SOC). This role is central to protecting Sovereign Cloud Customer’s critical systems, data, and services from cyber threats.

As a senior member of the team, you will lead advanced threat detection, incident response, and continuous monitoring activities, while also shaping the evolution of our security operations capabilities over both project based and business as usual work. You will act as a technical authority within the SOC, providing mentorship, driving improvements in tooling and processes, and collaborating with teams across the business to strengthen our overall security posture.

This role is ideal for someone who thrives in a fast‑paced environment, enjoys solving complex security challenges, and is passionate about staying ahead of emerging threats.

On a daily basis, you will:

• Lead the analysis of security alerts, logs, and telemetry from SIEM, EDR, network sensors, cloud platforms, and threat‑intelligence sources.
• Identify sophisticated attack patterns, anomalous behaviours, and indicators of compromise & continuously refine detection logic, correlation rules.
• Alert thresholds to reduce noise and improve accuracy.

Required skills

• Cloud and onsite security tooling (must have)
• Qualys (must have)
• FortiSIEM (desired)
• Solarwinds Security Monitor (desired)
• IDS/IPS Experience (must have)
• Python / Powershell Experience (must have)
• MITRE ATT&CK Experience (must have)
• SOC Experience (must have)