Senior SOC Analyst – Threat Detection & Incident Response

IBM; Hursley; On-site; GBP 65,000 - 90,000; Full time

Job summary

IBM CIC in the United Kingdom seeks a Technical Consultant specialising in Threat Detection, Response & Intelligence to monitor and respond within a 24x7 SOC environment. You will lead investigations and ensure high-quality security operations across client environments.

You will work with SIEM platforms, coordinate incident response, and contribute to playbooks and continuous improvement efforts for detection capabilities and alert quality across diverse client environments.

Qualifications

• Proven experience working in a SOC environment (L2 / L3) within a 24x7 operational setting.
• Strong experience with SIEM platforms, such as Microsoft Sentinel, QRadar, Splunk, Elastic or similar.
• Incident triage and investigation.
• Security event analysis.
• Alert validation and escalation.
• Understanding of incident response processes and workflows.
• Exposure to security tooling, such as EDR/XDR platforms, network security technologies, identity and access systems.
• Ability to interpret logs and identify suspicious behaviour across endpoints, networks and cloud environments.
• Strong communication skills, with the ability to clearly articulate incidents and risks.
• Experience working in client-facing or service-based environments.

Responsibilities

• Monitor, triage, and investigate security alerts and incidents across SIEM platforms.
• Lead or support incident response activities, including initial investigation and containment coordination.
• Act as a senior presence on shift, supporting analysts and ensuring SOC operations run smoothly.
• Drive incident quality, ensuring playbooks and procedures are followed.
• Produce clear incident reports and handovers; support client interactions when required.
• Contribute to playbook development and refinement to improve SOC efficiency.
• Collaborate with detection and engineering teams to improve alert quality and reduce false positives.

Skills

SOC operations

24x7 monitoring

Incident triage

Investigation

SIEM knowledge

Incident response

Playbook development

Threat detection

Communication

Education

Bachelor's Degree

Tools

Microsoft Sentinel

QRadar

Splunk

Elastic

Job description

IBM CIC in the United Kingdom seeks a Technical Consultant specialising in Threat Detection, Response & Intelligence to monitor and respond within a 24x7 SOC environment. You will lead investigations and ensure high-quality security operations across client environments.

You will work with SIEM platforms, coordinate incident response, and contribute to playbooks and continuous improvement efforts for detection capabilities and alert quality across diverse client environments.