Senior Tier II SOC Analyst — Remote Incident Response

CyberClan; United Kingdom; Remote; GBP 42,000 - 65,000; Full time

Job summary

CyberClan is seeking a proactive SOC Analyst to join its Security Operations team. This role involves hands-on incident handling, SIEM monitoring, and collaboration with global teams to detect and resolve cyber threats.

The position requires willingness to work shifts in a 24x7 environment and to contribute to playbooks and threat intelligence activities. The successful candidate will monitor security events, perform in-depth analysis, and provide timely reports and client communications.

Qualifications

• GCSE level or equivalent.
• Cyber Security Qualification (COMPTIA or equivalent).
• ITIL Foundation.
• Experience with SOC tooling to identify threats.
• Experience with collaboration tools.
• Strong analytical mind and problem-solving skills.
• Knowledge of networking fundamentals (OSI, TCP/IP, DNS).

Responsibilities

• Provide Tier 2 case resolution for complex security incidents with initial reporting and follow-ups.
• Triage and escalate day-to-day incidents using threat intelligence.
• Act as incident handler for P1/P2 incidents.
• Support SIEM and incident notification toolsets administration and configuration.
• Conduct threat hunting and develop incident response playbooks.
• Communicate security incidents and resolutions to clients and stakeholders.
• Develop and maintain incident response documentation and runbooks.

Skills

GCSE level

Cyber Security Qualification

ITIL Foundation

Education

GCSE level or equivalent

Cyber Security Qualification (COMPTIA or equivalent)

ITIL Foundation

Tools

SIEM: Splunk

Cloud technologies (AWS, GCP, Azure)

Endpoint protection tools

Job description

CyberClan is seeking a proactive SOC Analyst to join its Security Operations team. This role involves hands-on incident handling, SIEM monitoring, and collaboration with global teams to detect and resolve cyber threats.

The position requires willingness to work shifts in a 24x7 environment and to contribute to playbooks and threat intelligence activities. The successful candidate will monitor security events, perform in-depth analysis, and provide timely reports and client communications.