Senior SOC Analyst & Threat Intelligence Lead

Berenberg; Greater London; Hybrid; GBP 85,000 - 120,000; Full time

Benefits offered by this job

Private pension plan

Private Health Insurance

Enhanced parental leave policies

Employee Assistance Programme

Job summary

Berenberg is seeking a Senior SOC Analyst in London to join the Cyber Security Operations team. You will lead incident response, perform in-depth investigations, and craft incident reports for senior management, while helping to enhance monitoring, detection and threat intelligence capabilities across the bank.

The role requires 2–4 years in an SOC with financial services experience, hands-on Splunk, cloud and automation skills, and strong communication in English (German a plus).

Qualifications

• Two to four years of experience in a Security Operations Centre (SOC), with a focus on incident response and reporting within financial services.
• Practical knowledge of SIEM platforms, particularly Splunk, as well as IDS/IPS, firewalls and other security monitoring and protection technologies, with cloud experience (Azure and GCP).
• Hands-on experience applying AI and automation to security monitoring and detection, including SOAR, scripting in Python or PowerShell, and AI-enabled security tools.
• Strong analytical and problem-solving skills, with the ability to interpret large data volumes and communicate with technical and non-technical stakeholders.
• A collaborative mindset and ability to engage with senior executives, external partners and regulatory authorities; fluent English and business-level German.

Responsibilities

• Lead and coordinate security incident response activities from detection to containment, eradication and recovery.
• Detect, investigate and analyse threats using SIEM (Splunk) and other security technologies; review logs and traffic for root causes.
• Conduct proactive threat hunting and analyse emerging attack vectors to strengthen security posture.
• Produce incident reports with business and technical impacts; advise on improvements to cybersecurity strategy and risk controls.
• Maintain and improve incident response playbooks, processes and policies; mentor SOC teammates and share best practices.

Skills

SOC experience

Splunk SIEM

IDS/IPS

Cloud security (Azure, GCP)

SOAR automation

Python

PowerShell

AI in security

Executive communication

German language

Education

Degree in Information Security or Computer Science

Tools

Firewalls

Threat intel platforms

Job description

Berenberg is seeking a Senior SOC Analyst in London to join the Cyber Security Operations team. You will lead incident response, perform in-depth investigations, and craft incident reports for senior management, while helping to enhance monitoring, detection and threat intelligence capabilities across the bank.

The role requires 2–4 years in an SOC with financial services experience, hands-on Splunk, cloud and automation skills, and strong communication in English (German a plus).