Senior SOC Investigator: Cloud, Containers & Forensics

Forensic Focus; Greater London; On-site; GBP 60,000 - 90,000; Full time

Job summary

Forensic Focus in London is seeking an experienced SOC analyst to monitor, triage and investigate high-severity security incidents. You will lead containment and remediation, perform Linux/Unix log analysis and collect forensic artifacts, and conduct cloud and container investigations across Docker, Kubernetes and MacOS endpoints.

The role requires strong scripting skills, experience with Splunk, and familiarity with AI-driven investigation tools in a fast-paced environment.

Qualifications

• 5+ years of SOC and incident response experience.
• Strong Linux/Unix command-line skills.
• Cloud and container forensics expertise.
• Scripting and automation ability.
• SIEM familiarity (Splunk).
• Exposure to AI-driven investigation tools.

Responsibilities

• Monitor, triage and investigate high-severity security incidents.
• Lead containment and remediation efforts.
• Perform Linux/Unix log analysis and collect forensic artifacts.
• Conduct cloud and container-level investigations across Docker, Kubernetes and MacOS endpoints.

Skills

SOC experience

Incident response

Linux/Unix CLI

Cloud forensics

Container forensics

Scripting/Automation

AI-assisted tools

Tools

Splunk

Job description

Forensic Focus in London is seeking an experienced SOC analyst to monitor, triage and investigate high-severity security incidents. You will lead containment and remediation, perform Linux/Unix log analysis and collect forensic artifacts, and conduct cloud and container investigations across Docker, Kubernetes and MacOS endpoints.

The role requires strong scripting skills, experience with Splunk, and familiarity with AI-driven investigation tools in a fast-paced environment.