Senior SOC Incident Responder & Threat Hunter

SecurityHQ Ltd.; Greater London; Hybrid; GBP 50,000 - 80,000; Full time

Job summary

SecurityHQ Ltd. is seeking an experienced SOC Analyst to own incident response from initial detection through to resolution. You’ll investigate alerts across SIEM, EDR, email, cloud and identity while engaging directly with customers and coordinating with SOC and Engineering teams.

Based at our Blackfriars office, the role offers hybrid working with three days on site. You’ll develop expertise in incident response, threat hunting and security operations within a global cybersecurity context.

Qualifications

• Experience working within a SOC, MDR or Cyber Security Operations environment.
• Experience investigating and responding to security incidents rather than solely monitoring or triaging alerts.
• Hands-on experience analysing threats such as phishing, account compromise, malware, ransomware and endpoint attacks.
• Good understanding of attacker tactics, techniques and procedures, including frameworks such as MITRE ATT&CK.
• Experience working with Microsoft security technologies, including Microsoft Defender and Microsoft Sentinel.
• Ability to analyse logs, alerts and user activity to build a clear understanding of security incidents.
• Strong communication skills with the confidence to engage directly with customers.
• A proactive, inquisitive mindset and genuine passion for cyber security.
• Ability to manage multiple investigations in a fast-paced environment.
• Experience producing clear incident reports and root cause analysis documentation.

Responsibilities

• Investigate and respond to security incidents across SIEM, EDR, email, cloud, identity and network platforms.
• Take ownership of incidents from initial alert through to containment, remediation and resolution.
• Engage directly with customers, providing updates, recommendations and guidance throughout investigations.
• Analyse logs, alerts and system activity to determine root cause, impact and attack methodology.
• Conduct proactive threat hunting activities using threat intelligence and indicators of compromise (IOCs).
• Review and enhance detection rules, use cases and alert fidelity to improve threat visibility.
• Support major incident response activities and post-incident reviews.
• Produce high-quality incident reports, documentation and root cause analysis.
• Collaborate with SOC, Engineering and Cyber Security teams to resolve incidents effectively.
• Contribute to process improvements and initiatives that strengthen our clients' overall security posture.

Skills

SOC operations

Incident response

Threat hunting

MITRE ATT&CK

Microsoft Defender

Microsoft Sentinel

Log analysis

Customer communication

Multi-tasking

Documentation

Tools

Microsoft Defender

Microsoft Sentinel

Job description

SecurityHQ Ltd. is seeking an experienced SOC Analyst to own incident response from initial detection through to resolution. You’ll investigate alerts across SIEM, EDR, email, cloud and identity while engaging directly with customers and coordinating with SOC and Engineering teams.

Based at our Blackfriars office, the role offers hybrid working with three days on site. You’ll develop expertise in incident response, threat hunting and security operations within a global cybersecurity context.