Senior SOC Analyst

Northwest Partners LLC; Greater London; On-site; GBP 85,000 - 110,000; Full time

Job summary

Northwest Partners LLC is seeking experienced Senior SOC Analysts / Incident Response Specialists to join a leading social media company’s security operations team in London. The role focuses on investigating high-severity incidents, cloud and container forensics, and protecting critical infrastructure, systems, and user data.

The position requires 5+ years of hands-on SOC and IR experience, strong Linux/Unix skills, and experience across cloud and container environments.

Qualifications

• 5+ years hands-on experience triaging, investigating, and remediating high-severity security incidents.
• Experience in SOC operations and IR including alert triage, ticket handling, containment, and remediation.
• Strong Linux/Unix command-line and log analysis skills.
• Cloud forensics and incident response across multi-cloud environments.
• Container forensics involving Docker and Kubernetes.

Responsibilities

• Monitor, triage, investigate, and respond to security alerts and high-severity incidents.
• Lead hands-on investigations, containment, remediation, and recovery activities.
• Conduct Linux/Unix system interrogation and forensic artifact collection with log analysis.
• Perform cloud incident response and container-level investigations across environments including Docker and Kubernetes.
• Investigate threats affecting endpoints, cloud infrastructure, microservices, and containerised apps.
• Develop and tune detection alerts and build automation for SOC efficiency.
• Collaborate with Threat Hunting, Digital Forensics, and Infrastructure teams.
• Support post-incident reviews and continuous improvement.

Skills

SOC operations

Incident response

Linux/Unix

Cloud forensics

Container forensics

AI-driven security tools

Scripting/Automation

Communication skills

Threat hunting

Tools

Splunk

Docker

Kubernetes

Job description

Northwest Partners is seeking experienced Senior SOC Analysts / Incident Response Specialists to support a leading social media company’s security operations team in London. This is an opportunity to investigate and respond to high-severity security incidents, conduct cloud and container forensics, and help protect critical infrastructure, systems, and user data from sophisticated cyber threats. The ideal candidates bring 5+ years of hands‑on Security Operations Centre (SOC) and incident response experience, strong Linux/Unix expertise, and practical experience investigating incidents across cloud and container environments. Experience using AI-driven tools and automation to enhance security investigations and response is also important.

Work Schedule: Four 10-hour shifts per week, 06:00–16:00 UK time. Shift patterns are Sunday–Wednesday or Wednesday–Saturday.

Work Arrangement: Onsite in Barbican, London.

Contract Duration: March 2027.

What You Will Do

• Monitor, triage, investigate, and respond to security alerts and high-severity incidents.
• Lead hands-on investigations, incident containment, remediation, and recovery activities.
• Conduct Linux/Unix system interrogation, log analysis, and forensic artifact collection.
• Perform cloud incident response and container-level investigations across environments including Docker and Kubernetes.
• Investigate threats affecting MacOS endpoints, cloud infrastructure, microservices, and containerised applications.
• Use AI-driven and agentic tools to enhance incident investigations, SOC triage, and response workflows.
• Develop and tune detection alerts to identify anomalous and malicious activity.
• Write scripts and build automation workflows to improve operational efficiency and response capabilities.
• Conduct root‑cause analysis and support threat hunting, proactive investigations, and detection engineering.
• Manage SOC tickets and drive incidents through investigation and resolution.
• Collaborate with Threat Hunting, Cyber Threat Intelligence, Digital Forensics, Legal, and Infrastructure teams.
• Work independently in fast-moving incident scenarios and contribute to post‑incident reviews and continuous improvement.

What You Will Bring

• 5+ years of hands‑on experience triaging, investigating, managing, and remediating high‑severity security incidents.
• Strong operational SOC and incident response experience, including alert triage, ticket handling, containment, and remediation.
• Deep hands‑on Linux/Unix command‑line experience, including log analysis and forensic artifact collection.
• Experience with cloud forensics and incident response across multi‑cloud environments.
• Practical experience with container forensics, including Docker, Kubernetes, and container runtime logs.
• Operational incident response experience across at least two of the following: MacOS endpoints, Linux cloud environments, and microservices/containers.
• Experience leading complex investigations involving multiple data sources, teams, and regions.
• Practical experience using AI‑driven tools and developing scripts or automation workflows to improve SOC operations.
• Ability to investigate complex security incidents independently and drive remediation without detailed direction.
• Experience with SIEM platforms such as Splunk.
• Strong analytical, investigative, problem‑solving, and communication skills.
• Ability to collaborate effectively with cross‑functional security and infrastructure teams.
• Experience with 7AI, agentic security tools, threat hunting, or detection engineering would be advantageous.

Disclaimer

All candidates will be asked to briefly show a government‑issued ID on video during the first interview. This step protects the integrity of the hiring process given the rise in applicant impersonation and employment fraud.

About Northwest Partners

Northwest Partners is an equal opportunity employer. At Northwest Partners, we are dedicated to moving at the speed of innovation. We work with clients across the globe to provide exceptional knowledge, talent, and resources. As a trusted partner, we merge the client’s vision with our expertise to deliver powerful results. Northwest Partners is known for building and managing elite teams in technology across diverse industries. Our mission is to empower every talent and every client to achieve more.