Senior SOC L3 Analyst & Incident Commander

AtkinsRéalis Group; Epsom; Remote; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Hybrid working culture

Flexible holiday allowances

Job summary

AtkinsRéalis is seeking an experienced SOC Level 3 Analyst to lead complex investigations and incident response in a 24x7 Security Operations Centre. You will act as Incident Commander, coordinate technical response efforts, and drive improvements in detections, analytics and playbooks.

The role focuses on automation, threat hunting and collaboration across security teams. You will mentor analysts, prepare concise communications for technical and leadership audiences, and contribute to the SOC’s

Qualifications

• Experience in a 24x7 Security Operations Centre (SOC) or Incident Response environment.
• Proven ability to improve threat detection, monitoring, incident response, and SOC maturity.
• Certifications such as CISSP, GCIH, GCFA, GCIA, Security+, Azure Security or equivalent would be a plus.

Responsibilities

• Lead complex and high-severity cyber security investigations and incident response activities within a 24x7 SOC.
• Act as Technical Incident Lead or Incident Commander during major cyber security incidents.
• Develop, tune, test, and improve detections, analytics, and playbooks.
• Drive automation and orchestration across security operations to reduce manual tasks.
• Mentor SOC analysts and communicate with technical and executive stakeholders.

Skills

Incident Management

Threat Hunting

MITRE ATT&CK analysis

Technical Writing

Communication

Mentoring/Coaching

Problem-solving

Curiosity

Continuous improvement

Advanced threat investigation

Threat actor TTP analysis

Tools

SIEM platforms

SOAR

Threat intelligence solutions

Job description

AtkinsRéalis is seeking an experienced SOC Level 3 Analyst to lead complex investigations and incident response in a 24x7 Security Operations Centre. You will act as Incident Commander, coordinate technical response efforts, and drive improvements in detections, analytics and playbooks.

The role focuses on automation, threat hunting and collaboration across security teams. You will mentor analysts, prepare concise communications for technical and leadership audiences, and contribute to the SOC’s