Senior SOC Analyst| Hybrid

HR Ways; England; Hybrid; GBP 70,000 - 90,000; Full time

Job summary

A technology consulting firm is seeking an experienced Senior SOC Analyst to lead the deployment of Microsoft Sentinel in OT environments. Responsibilities include configuring log sources, developing detection rules, and integrating threat intelligence. The role offers a hybrid work model, requiring 3 days in-office and 2 days remote, with a strong emphasis on incident response automation and visualization of security metrics.

Qualifications

• 10+ years of experience in cybersecurity, specifically for network security and incident response.
• Experience with SIEM, SOAR, and threat intelligence integration.

Responsibilities

• Lead deployment of Microsoft Sentinel across OT environments.
• Configure and onboard diverse log sources into Sentinel.
• Develop analytics rules tailored to OT threat scenarios.
• Integrate threat intelligence feeds to enhance detection capabilities.
• Automate incident response workflows using Logic Apps.
• Visualize OT security posture and trends with custom dashboards.

Job description

About the job Senior SOC Analyst | Hybrid

Hiring Senior SOC Analyst SOC SEM | Hybrid from England, UK.

Client Introduction:

The company is a multinational Sweden-based SAAS product firm.

Company Strength: 100+ Jobs

Job Description:

The Subject Matter Expert in Cybersecurity designing & implementing network security, SIEM, SOAR & threat intelligence.

Key Responsibilities:

Lead Sentinel Deployment for OT SOC Architect and implement Microsoft Sentinel across global OT environments to centralize security monitoring and incident response.

• Log Source Integration Configure and onboard diverse log sources, including Nozomi Networks, firewalls, EDR (e.g., Defender for Endpoint), VMDR (e.g., Qualys), and other OT/IT systems, into Sentinel.
• Custom Analytics & Detection Rules Develop and fine-tune KQL-based analytics rules tailored to OT threat scenarios, ensuring high-fidelity alerts and minimal false positives.
• Threat Intelligence Integration Integrate threat intelligence feeds into Sentinel to enhance detection capabilities and contextualize alerts within the OT landscape.
• Incident Response Automation Design and implement playbooks using Logic Apps to automate incident response workflows for common OT security events.
• Execution of the use cases on SIEM, SOAR & Threat Intelligence.
• Build custom workbooks and dashboards to visualize OT security posture, threat trends, and SOC performance metrics.

Other Details:

Work Mode: Hybrid from England, UK

Working Days: 3 days WFO & 2 days WFH

Required Experience: 10+ Years