SOC Analyst

Experis (Austria); Hursley; On-site; GBP 70,000 - 90,000; Full time

Job summary

ManpowerGroup is seeking a Technical Consultant – Threat Detection, Response & Intelligence for an on-site role in the UK. You will monitor, investigate and respond to cyber threats, leveraging SIEM tools and Defender/ Microsoft security tooling to protect critical systems.

The ideal candidate is an experienced SOC professional with hands-on security operations expertise, strong analytical thinking, and effective communication. UK residency of 5+ years and SC-200 certification are mandatory.

Qualifications

• UK national with a minimum of 5 years' UK residency.
• SC-200 certification mandatory.
• Hands-on experience with SIEM technologies.
• Solid understanding of IT infrastructure and networking.
• Knowledge of the incident response lifecycle.

Responsibilities

• Monitor, triage and investigate security alerts and events across SIEM and broader tooling.
• Identify suspicious activity, indicators of compromise and potential security incidents.
• Conduct initial incident investigations, assess severity and impact, and escalate appropriately with clear supporting evidence.
• Support the full incident response lifecycle, including containment, remediation and post-incident learning.
• Use threat intelligence to strengthen detection, investigation and response activities.
• Contribute to threat monitoring, reporting and trend analysis.
• Tune detection rules and analytics to reduce false positives and improve detection quality.
• Support continual service improvement across security monitoring and response processes.
• Work collaboratively with security, infrastructure and wider technology teams, while also managing independent workstreams effectively.

Skills

SC-200 Certification

SIEM Experience

IT Infrastructure

Networking

Incident Response Lifecycle

Teamwork

Threat Detection & Management

Cyber Security

Tools

QRadar

Microsoft Sentinel

LogRhythm Security Analytics

Job description

Technical Consultant – Threat Detection, Response & Intelligence

Location: Hursley - On-site
Security clearance: UK national with a minimum of 5 years' UK residency required
Certification: Microsoft Certified: Security Operations Analyst Associate

We are seeking a technically strong and proactive Technical Consultant – Threat Detection, Response & Intelligence to join our security operations capability. You will play a key role in monitoring, investigating and responding to cyber threats, helping protect critical systems and improving the organisation's overall security posture.

This is an excellent opportunity for an experienced SOC or security operations professional who combines hands-on technical expertise with strong analytical thinking, clear communication and a genuine interest in threat management. The SC-200 certification validates expertise in investigating, mitigating and responding to threats using Microsoft security technologies, including Sentinel and Defender tooling.

What you'll do

• Monitor, triage and investigate security alerts and events across SIEM and wider security tooling.

• Identify suspicious activity, indicators of compromise and potential security incidents.

• Conduct initial incident investigations, assess severity and impact, and escalation appropriately with clear supporting evidence.

• Support the full incident response lifecycle, including containment, remediation and post-incident learning.

• Use threat intelligence to strengthen detection, investigation and response activities.

• Contribute to threat monitoring, reporting and trend analysis.

• Tune detection rules and analytics to reduce false positives and improve detection quality.

• Support continual service improvement across security monitoring and response processes.

• Work collaboratively with security, infrastructure and wider technology teams, while also managing independent workstreams effectively.

What we're looking for

Essential

• UK national with a minimum of 5 years' UK residency.

• Microsoft Certified: Security Operations Analyst Associate (SC-200) - mandatory.

• Practical experience with SIEM technologies and security tooling.

• Solid understanding of IT infrastructure and networking.

• Understanding of vulnerability and threat management.

• Knowledge of the incident response lifecycle.

• Strong team-working skills alongside the ability to work independently.

• Adaptable and resilient in a fast-paced, changing workload.

• Genuine interest in cyber security, threat detection and threat management.

Desirable

• Protective Monitoring or SOC experience.

• Hands-on experience with SIEM platforms such as QRadar, Microsoft Sentinel or LogRhythm Security Analytics.

• Experience in incident investigation, triage and escalation.

• Threat monitoring and response experience.

• Trend reporting and security analytics.

• Detection rule tuning and continual service improvement.

If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.