Senior SOC L3 Analyst - Incident Commander & Threat Hunter

AtkinsRéalis; Epsom; On-site; GBP 80,000 - 110,000; Full time

Benefits offered by this job

Hybrid working

Flexible holidays

Job summary

AtkinsRéalis in the United Kingdom seeks a Senior L3 SOC Analyst to lead complex cyber security investigations within a 24x7 Security Operations Centre. You will act as Incident Commander, guiding containment, eradication, recovery and closure, while coordinating technical response with teams and stakeholders.

You will develop and tune detections, use cases and playbooks, driving automation and improving SOC capabilities.

Qualifications

• Experience in a 24x7 SOC or Incident Response environment, ideally supporting a global organisation.
• Proven record of improving threat detection, monitoring, and SOC maturity at scale.
• Good networking knowledge and broad security domain expertise.

Responsibilities

• Lead complex and high-severity cyber security investigations and incident response within a 24x7 SOC; act as senior escalation point and Incident Commander.
• Coordinate technical response activities, assess risk, and communicate with technical teams, leadership and business stakeholders.
• Conduct proactive threat hunting, advanced investigations, and forensic triage across endpoints, network, cloud and identity.
• Develop, tune and improve security detections, playbooks, and response procedures aligned to MITRE ATT&CK.
• Drive automation and orchestration to accelerate investigations and reduce manual work.
• Mentor SOC analysts, support SOC metrics, and participate in on-call/off-hours response when required.

Skills

Incident management

Technical writing

Communication

Mentoring

Continuous improvement

Threat hunting

MITRE ATT&CK

Problem-solving

Curiosity

Education

Industry certifications (CISSP, GCIH, GCFA, GCIA, Security+, Azure Security)

Tools

SIEM platforms

SOAR

Threat intelligence solutions

EDR/Network monitoring

Job description

AtkinsRéalis in the United Kingdom seeks a Senior L3 SOC Analyst to lead complex cyber security investigations within a 24x7 Security Operations Centre. You will act as Incident Commander, guiding containment, eradication, recovery and closure, while coordinating technical response with teams and stakeholders.

You will develop and tune detections, use cases and playbooks, driving automation and improving SOC capabilities.