Senior SOC Analyst

Forensic Focus; Greater London; On-site; GBP 60,000 - 90,000; Full time

Job summary

Forensic Focus in London is seeking an experienced SOC analyst to monitor, triage and investigate high-severity security incidents. You will lead containment and remediation, perform Linux/Unix log analysis and collect forensic artifacts, and conduct cloud and container investigations across Docker, Kubernetes and MacOS endpoints.

The role requires strong scripting skills, experience with Splunk, and familiarity with AI-driven investigation tools in a fast-paced environment.

Qualifications

• 5+ years of SOC and incident response experience.
• Strong Linux/Unix command-line skills.
• Cloud and container forensics expertise.
• Scripting and automation ability.
• SIEM familiarity (Splunk).
• Exposure to AI-driven investigation tools.

Responsibilities

• Monitor, triage and investigate high-severity security incidents.
• Lead containment and remediation efforts.
• Perform Linux/Unix log analysis and collect forensic artifacts.
• Conduct cloud and container-level investigations across Docker, Kubernetes and MacOS endpoints.

Skills

SOC experience

Incident response

Linux/Unix CLI

Cloud forensics

Container forensics

Scripting/Automation

AI-assisted tools

Tools

Splunk

Job description

The Role

This onsite London position involves monitoring, triaging and investigating high-severity security incidents, leading containment and remediation, performing Linux/Unix log analysis and forensic artifact collection, and conducting cloud and container-level investigations across Docker, Kubernetes and MacOS endpoints.

Skills & Experience

Candidates need 5+ years of SOC and incident response experience, strong Linux/Unix command-line skills, cloud and container forensics expertise, scripting and automation ability, SIEM familiarity (Splunk), and exposure to AI-driven investigation tools.

Who It Suits

Ideal for experienced SOC analysts or incident responders comfortable working independently in fast-paced environments, who enjoy hands-on technical investigation across cloud, container and endpoint systems within a large-scale organisation.