Senior SOC Analyst x 2

Morson Talent; London; Remote; GBP 150,000 - 200,000; Full time

Job summary

A leading recruitment agency is seeking experienced Senior SOC Analysts for a remote position within a major UK energy company. Candidates will lead complex security incidents and investigations, while advising on tool integration and security compliance. Active SC clearance is prioritized. The role offers exceptional exposure and responsibility in a high-profile environment, with a contract running until March 2026.

Qualifications

• Significant experience in SOC operations and cyber incident response.
• Strong knowledge of adversary TTPs and frameworks such as MITRE ATT&CK.
• Hands-on skills in log analysis, anomaly detection, and incident remediation.
• Strong communication skills with the ability to translate technical threats into business terms.

Responsibilities

• Lead incident response activities across SIEM, EDR/XDR, networks, and cloud platforms.
• Produce clear, business-focused incident reports for senior stakeholders.
• Advise on SOC tooling and ensure effective integration of incident response requirements.
• Support security exercises and crisis response.

Skills

Experience in SOC operations

Knowledge of adversary TTPs

Log analysis skills

Cloud environment (Azure/AWS)

Strong communication skills

Tools

Microsoft Sentinel

Microsoft Defender for Endpoint

Wireshark

Palo Alto Cortex XSOAR

Tenable Nessus

Job description

Senior SOC Analyst x 2 – GBP615 per day – Inside IR35 – Remote – contract until end of March 2026 – Candidates with active SC clearance or those with a recently lapsed clearance will be prioritised.

Our client, one of the UKs largest producers of zero carbon energy, is looking for 2 Senior SOC Analysts to join their Security Operations Centre.

This is an excellent opportunity for an experienced SOC professional to step into a senior role, leading on complex investigations and incident response within a high–profile environment.

The Role –

The Senior SOC Analyst will act as the technical expert within the SOC, responsible for handling escalations from Tier 1 and Tier 2 analysts and managing the most complex security incidents. You will lead deep–dive investigations, improve detection and response processes, and play a key role in stakeholder engagement.

Key responsibilities include:

• Analysing advanced security incidents, determining root cause and attack paths.
• Leading incident response activities across SIEM, EDR/XDR, networks, and cloud platforms.
• Producing clear, business–focused incident reports and updates for senior stakeholders.
• Advising on SOC tooling and ensuring effective integration of incident response requirements.
• Supporting security exercises, crisis response, and compliance alignment with industry frameworks.

Candidate Profile –

The successful candidate will bring:

• Significant experience in SOC operations and cyber incident response.
• Strong knowledge of adversary TTPs and frameworks such as MITRE ATT&CK.
• Hands–on skills in log analysis, anomaly detection, and incident remediation.
• Experience working in traditional IT and cloud (Azure and/or AWS) environments.
• Strong communication skills with the ability to translate technical threats into business terms.

Tools & Technologies –

You will work with a modern SOC technology stack, including:

• SIEM: Microsoft Sentinel
• EDR/XDR: Microsoft Defender for Endpoint
• Threat Intel: Recorded Future
• Network Analysis: Wireshark / tcpdump
• SOAR & Automation: Palo Alto Cortex XSOAR, ServiceNow SecOps
• Vulnerability Management: Tenable Nessus / Tenable.io
• Other nice to have tools: Shodan, Censys, BloodHound, Metasploit, Cobalt Strike, MITRE ATT&CK Navigator
• Cloud Security (advantageous): AWS GuardDuty, Security Hub, CloudTrail, Detective, Macie, Config, Inspector, VPC Flow Logs
  
  

Security clearance –

Due to the nature of this role, Security Check (SC) clearance is required. Candidates with active SC clearance or those with a recently lapsed clearance will be prioritised during the shortlisting process.