Senior SOC Analyst - Shift Lead

JR United Kingdom; Cheltenham; Hybrid; GBP 35,000 - 40,000; Full time

Job summary

A leading cybersecurity consulting firm seeks a Senior SOC Analyst, Shift Lead who will provide hands-on leadership and expertise in a dynamic team. This role offers a hybrid working model with a unique 4-on, 4-off shift pattern, ensuring balanced work-life and substantial professional growth in operational cybersecurity.

Benefits

Generous shift allowance of 17.5%

Flexible hybrid working model

Qualifications

• Commercial experience with Microsoft Sentinel is mandatory.
• Strong incident response and threat hunting skills are required.
• Exceptional communication and problem-solving abilities necessary.

Responsibilities

• Guide and mentor junior SOC analysts while managing incident responses.
• Perform threat detection and log analysis across multiple platforms.
• Enhance operational efficiency and integrate emerging technologies.

Skills

Mentorship

Incident Response

Threat Hunting

Problem Solving

Communication

Education

Microsoft SC-200 certification

SANS certifications

Tools

Microsoft Sentinel

Microsoft Defender for Endpoint

SentinelOne

Job description

Social network you want to login/join with:

col-narrow-left

Client:

Location:

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

4

Posted:

16.06.2025

Expiry Date:

31.07.2025

col-wide

Job Description:

Hybrid – 1 day in the office every 4 – 6 weeks (only on the rotating early shift and if it is a Wednesday, and ONLY on a Wednesday, otherwise just fully remote)

Salary - £35,000 - £40,000 base + 17.5% shift allowance (shift allowance paid monthly)

Work 4 days and then enjoy 4 days completely off, giving you more time for family, travel, or rest. In a critical cybersecurity role, you’ll gain round-the-clock operational experience that accelerates your career. Plus, you’ll avoid the typical Monday-Friday grind and long commute times, all whilst having a generous shift allowance of 17.5%!

Our client is a dedicated, pure-play cybersecurity consulting firm. As part of their growth plans, they are seeking a Senior SOC Analyst, Shift Lead who combines technical expertise with a desire to lead junior analysts to join their dynamic, fast-paced team.

About the Role

This is a hands-on shift leadership role operating on a 4-on, 4-off shift pattern, ensuring sustained SOC coverage across critical hours. You’ll manage, mentor, and train two junior SOC analysts working on your shift, while also delivering advanced security operations services to clients across a range of industries.

As a Senior SOC Analyst, you will be central to incident response, threat hunting, and real-time defence management, guiding and mentoring two junior SOC analysts.

The SOC team is deeply committed to leveraging the latest in automation and artificial intelligence, including SOAR platforms, to deliver smarter, faster, and more effective security outcomes. This role provides a unique opportunity to help shape the future of a next-gen SOC environment.

This role combines hands-on technical expertise with management responsibility, offering a unique blend and the chance to contribute meaningfully to both team development and cutting-edge security operations.

The shift pattern is four days on, four days off, with rotating early (6 am-3 pm), late (2 pm-11 pm), and night (10 pm-7 am) shifts.

Key Responsibilities

• Mentorship & Team Leadership: Guide and support two juniors with ticket escalation and investigating incidents, fostering a culture of collaboration and continuous learning.
• Client Relationship Management: Act as a point of contact, managing ongoing communications and ensuring technical needs are met
• Threat Detection & Analysis: Triage and analyse alerts across multiple SIEM platforms (e.g., Microsoft Sentinel, custom ELK stacks).
• Log & Threat Intelligence Analysis: Perform detailed log analysis and threat intelligence research to uncover root causes and bolster security defences.
• Technical Reporting: Deliver clear, client-focused reports on incidents, alerts, and threat activity.
• Escalation Handling: Manage critical escalations with precision and provide comprehensive, well-documented resolutions.
• SOC Innovation: Work with leadership to enhance operational efficiency and integrate emerging technologies.
• Incident Management: Lead security incident investigations and responses, offering strategic input to clients and internal teams.
• Continuous Development: Stay current on cybersecurity trends and research emerging threats, tools, and methodologies.

What We're Looking For

• Commercial experience with Microsoft Sentinel is a MUST, including investigations, rule tuning, workbook development, and automation playbook design.
• Microsoft SC-200 certification is a mandatory requirement.
• SC-100, SC-300, SC-400, or AZ-500 are highly desirable
• Proficiency with EPP tools such as Microsoft Defender for Endpoint and SentinelOne.
• Experience working with ticketing systems and handling end-to-end workflows.
• Strong incident response and threat hunting skills.
• Excellent problem-solving abilities and the capacity to make sound decisions under pressure.
• Exceptional communication and interpersonal skills, with a customer-focused mindset.
• SANS certifications (desirable but not essential).