Senior Security Operations Center Analyst

ZipRecruiter; London; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

A leading customer data science company seeks a Senior Security Operations Center Analyst to enhance their global information security team. This role involves advanced threat detection, incident management, and supporting security automation initiatives, with a focus on work-life balance and flexible arrangements.

Qualifications

• Experience with XDR tools (e.g., Carbon Black, CrowdStrike).
• Expertise in using SIEM platforms (Microsoft Sentinel, Splunk).
• Familiarity with MITRE ATT&CK framework.

Responsibilities

• Advanced threat detection and monitoring.
• Engineering robust detections and threat hunts.
• Responding to and managing security incidents.

Skills

Security Monitoring & Detection

Kusto Query Language (KQL)

Cloud Security

Threat Hunting

Security Automation

Scripting (Python, PowerShell)

Kubernetes

Job description

Job Description

Senior Security Operations Center Analyst - Permanent - 3x a week in office, Hybrid

Bestman Solutions is working with a leading customer data science company to hire a senior security operations analyst to bolster its global information security team.

This is a fantastic opportunity to work with a market-leading business, contribute to cutting-edge security operations, and play a key role in enhancing security capabilities across global retail clients.

Key Responsibilities

• Advanced threat detection and monitoring using industry-leading tools.
• Building and tuning detections using Kusto Query (KQL).
• Responding to and managing security incidents effectively.
• Engineering robust detections and performing proactive threat hunts.
• Supporting security automation and infrastructure-as-code initiatives.

Qualifications

We're looking for someone with relevant experience in the following:

• Security Monitoring & Detection (e.g., XDR tools like Carbon Black, Microsoft Defender XDR, CrowdStrike)
• Strong KQL capabilities for log analysis and detection tuning
• Cloud Security (Microsoft Azure, Google Cloud Platform)
• Kubernetes and container technologies (e.g., Docker)
• Threat Hunting, Detection Engineering, Incident Response
• Security Automation (SOAR), Hyper Automation practices
• Familiarity with the MITRE ATT&CK framework
• SIEM platforms (Microsoft Sentinel, Splunk, Google Chronicle, etc.)
• Experience with Zero Trust Network Architecture, IDS/IPS, vulnerability scanners, and web proxies
• Scripting or programming (Python, PowerShell, Bash, etc.)

Join a global leader at the forefront of data-driven customer insights, where you’ll contribute to meaningful projects using cutting-edge technology.

Enjoy the benefits of flexible work arrangements and a genuine focus on work/life balance, all within an inclusive culture supported by active employee-led communities and networks.

Interviews will commence swiftly!