Senior SOC Analyst

Bonhill Partners; Greater London; On-site; GBP 60,000 - 80,000; Full time

Job summary

Bonhill Partners is looking for a cybersecurity professional with over 5 years of experience in a Security Operations Center. Expert knowledge of Splunk and strong skills in SPL are required. Candidates should have a deep understanding of security monitoring, incident response, and threat detection methodologies. Familiarity with EDR tools and a working knowledge of Windows and Linux internals from a security perspective are also needed. This position is based in Greater London.

Qualifications

• 5+ years of experience in a Security Operations Center or similar cybersecurity role.
• Expert knowledge of Splunk (preferably Splunk Enterprise Security).
• Strong experience in SPL (Search Processing Language) and log analysis.
• Deep understanding of security monitoring, incident response, and threat detection methodologies.
• Familiarity with MITRE ATT&CK, cyber kill chain, and common attack vectors.

Responsibilities

• Experience with EDR tools (e.g., CrowdStrike, SentinelOne), firewalls, IDS/IPS, and SOAR platforms.
• Working knowledge of Windows and Linux internals from a security perspective.

Skills

Experience in SOC or similar cybersecurity role

Expert knowledge of Splunk

Strong experience in SPL and log analysis

Deep understanding of incident response and threat detection

Familiarity with MITRE ATT&CK

Experience with EDR tools

Job description

• 5+ years of experience in a Security Operations Center or similar cybersecurity role.
• Expert knowledge of Splunk (preferably Splunk Enterprise Security).
• Strong experience in SPL (Search Processing Language) and log analysis.
• Deep understanding of security monitoring, incident response, and threat detection methodologies.
• Familiarity with MITRE ATT&CK, cyber kill chain, and common attack vectors (phishing, malware, insider threats).
• Experience with EDR tools (e.g., CrowdStrike, SentinelOne), firewalls, IDS/IPS, and SOAR platforms.
• Working knowledge of Windows and Linux internals from a security perspective.