Senior SOC Analyst - Threat Hunting & Incident Response

IAG Transform UK; Greater London; On-site; GBP 85,000 - 115,000; Full time

Benefits offered by this job

Health insurance

Pension

Performance bonuses

Job summary

IAG Transform UK is seeking a Senior SOC Analyst to identify, investigate and respond to threats across IAG networks, systems, and applications. You will act as the primary escalation point for critical alerts, drive proactive threat hunting, and mentor junior analysts.

The role requires working with security leadership and business units, with occasional after-hours on-call for critical incidents in a dynamic aviation-focused environment.

Qualifications

• Security analysis and incident investigation across cloud, identity, email, network and endpoint.
• Investigation of Windows and Linux systems using EDR/XDR tooling such as CrowdStrike and Microsoft Defender.
• AWS log monitoring, including GuardDuty, CloudTrail and VPC Flow Memory forensics, including dump extraction and analysis.
• Threat hunting and TTP research.
• Strong understanding of the cyber threat landscape, particularly in aviation.
• Malware analysis and reverse engineering.
• Penetration testing.
• Digital forensics.

Responsibilities

• Act as the primary escalation point for critical security alerts and lead investigations.
• Drive containment and remediation with relevant teams within required time frames.
• Turn threat intelligence into proactive threat hunting and research new attacks.
• Produce and interpret security metrics for senior leadership.
• Mentor less experienced analysts and participate in on-call rotation.

Skills

Security incident analysis

Threat hunting

Cloud security

EDR/XDR tools

Windows & Linux forensics

Malware analysis

Penetration testing

Digital forensics

Tools

CrowdStrike

Microsoft Defender

AWS GuardDuty

CloudTrail

Job description

IAG Transform UK is seeking a Senior SOC Analyst to identify, investigate and respond to threats across IAG networks, systems, and applications. You will act as the primary escalation point for critical alerts, drive proactive threat hunting, and mentor junior analysts.

The role requires working with security leadership and business units, with occasional after-hours on-call for critical incidents in a dynamic aviation-focused environment.