Senior SOC Analyst | Incident Response Lead (Hybrid/Remote)

Resillion; Birmingham; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Hybrid work model

Career development support

Certification assistance

Job summary

Resillion is seeking a Senior SOC Analyst in Birmingham for a hybrid/remote role. You will lead complex security incidents, mentor SOC analysts, and perform proactive threat hunting across diverse customer environments.

The ideal candidate has 4+ years of security operations experience with SIEMs (prefer Microsoft Sentinel), strong threat hunting skills, and practical knowledge of MITRE ATT&CK. Rotation shifts apply, and SC clearance eligibility is required.

Qualifications

• Extensive security monitoring and incident investigation with SIEM
• Experience tuning detection rules, analytics, dashboards and alerts
• Advanced knowledge of threat detection methodologies and MITRE ATT&CK
• Strong networking knowledge (TCP/IP, DNS, HTTP/S, VPNs) and security protocols
• Hands-on with Windows, Linux, AD, Azure and cloud security tools
• Experience leading incidents through full lifecycle and mentoring juniors
• Experience in MSSP/SOC environments with stakeholder management
• Ability to produce detailed technical and executive incident reports

Responsibilities

• Lead investigation and analysis of complex security incidents and determine root cause
• Act as senior escalation point for SOC Analysts and provide technical leadership
• Conduct advanced threat hunting across customer environments
• Analyse threat intelligence to improve detection and response
• Lead evaluation of customer security postures and recommend improvements
• Drive improvements to incident response, detection engineering, and SOC processes
• Own creation and optimization of SOC playbooks, runbooks, and procedures
• Develop and maintain SIEM use cases, correlation rules, dashboards, and alerts
• Oversee vulnerability management and remediation guidance
• Collaborate with Incident Response and Engineering teams during incidents
• Produce executive-level incident reports and service-review documentation
• Support customer onboarding including log source integration and strategy

Skills

SIEM experience

Threat hunting

MITRE ATT&CK

Incident response

Mentoring juniors

Networking basics

Cloud security

Analytical thinking

Rotational shifts

SOC leadership

Windows/Linux/AD/Azure

Tools

CrowdStrike Falcon

Microsoft Defender XDR

KQL

PowerShell scripting

Python scripting

Job description

Resillion is seeking a Senior SOC Analyst in Birmingham for a hybrid/remote role. You will lead complex security incidents, mentor SOC analysts, and perform proactive threat hunting across diverse customer environments.

The ideal candidate has 4+ years of security operations experience with SIEMs (prefer Microsoft Sentinel), strong threat hunting skills, and practical knowledge of MITRE ATT&CK. Rotation shifts apply, and SC clearance eligibility is required.