Senior SOC Analyst & Threat Hunter Leader

Tesco UK; Digswell; Hybrid; GBP 70,000 - 110,000; Full time

Job summary

Tesco UK is seeking a Security Analyst III to be the technical authority within the SOC, leading investigations, proactive threat hunting, and maturing security operations across the team. You will act as a role model for SOC Analysts, coaching and guiding them to elevate technical capability and analytical rigour.

Beyond day-to-day operations, you will lead maturity objectives, optimise SOC tooling, and identify opportunities for automation, AI integration, and impactful service improvements.

Qualifications

• Over 2 years in an internal SOC or 3 years in an MSSP in a senior role.
• Deep knowledge of MITRE ATT&CK, Cyber Kill Chain, Incident Response Lifecycle, Pyramid of Pain.
• Expertise in threat hunting and advanced investigative analysis.
• Deep understanding of attacker TTPs and threat actor behaviours.
• Proficiency in SIEM/XDR platforms and tuning detection logic, use cases, and alert optimisation.
• Advanced querying and scripting skills (e.g., KQL, SPL).
• Ability to recommend tooling enhancements and process improvements to strengthen SOC capability.
• Practical knowledge of networks, operating systems, and scripting for investigative purposes.
• Experience in leading technical initiatives and driving service maturity improvements.
• Demonstrated ability to coach and develop team members, fostering technical excellence.

Responsibilities

• Deliver high-quality investigative analysis to ensure rapid and accurate incident resolution.
• Act as the escalation point and technical authority for complex SOC investigations.
• Lead proactive threat-hunting initiatives to identify and mitigate emerging threats before they impact the business.
• Role-model analytical excellence and decision-making, setting the benchmark for SOC performance.
• Coach and mentor analysts to build technical depth and confidence across the team.
• Drive SOC maturity objectives, improving processes, tooling, and automation for greater efficiency.
• Enhance SOC tool utilisation, including workflow optimisation.
• Identify and implement automation, AI-driven enhancements, and playbook developments.
• Support CSIRT activities during major incidents, ensuring coordinated and effective response.
• Monitor MSSP performance, ensuring alert triage and investigations meet quality and timeliness standards.

Skills

Threat hunting

Incident response

SOC maturity

Coaching analysts

SIEM/XDR tuning

KQL

SPL

Analytical thinking

Automation awareness

Education

Bachelor's degree in a relevant field

GIAC certifications (desirable)

Tools

SIEM/XDR platforms

Threat intelligence tooling

Job description

Tesco UK is seeking a Security Analyst III to be the technical authority within the SOC, leading investigations, proactive threat hunting, and maturing security operations across the team. You will act as a role model for SOC Analysts, coaching and guiding them to elevate technical capability and analytical rigour.

Beyond day-to-day operations, you will lead maturity objectives, optimise SOC tooling, and identify opportunities for automation, AI integration, and impactful service improvements.