SOC Analyst

Reed Technology; North East; Remote; GBP 35,000 - 48,000; Full time

Job summary

Reed Technology is recruiting for a SOC Analyst to join a growing Security Operations team in Newcastle. The role is suitable for an established SOC Analyst or a strong 1st Line Analyst ready to take the next step, with hands-on exposure to a broad Microsoft security environment and ownership of investigations and incidents.

You'll work at 2nd Line level, monitoring SIEM alerts, threat hunting, and supporting vulnerability remediation while using Sentinel, Defender and Entra.

Qualifications

• Experience in a SOC / Security Operations environment.
• Exposure to Microsoft Sentinel and/or Microsoft Defender.
• Solid understanding of security incident investigation and response.
• Knowledge of Windows environments and general networking/security principles.
• Exposure to KQL would be beneficial.
• A genuine desire to develop technically within cybersecurity.

Responsibilities

• Investigate and respond to security incidents at 2nd line until resolution.
• Monitor customer environments and SIEM alerts.
• Proactively threat hunt and identify potential risks.
• Support vulnerability assessment and remediation efforts.
• Work across the Microsoft security stack (Sentinel, Defender, Entra).
• Utilise KQL and PowerShell in investigations and automation.
• Act as escalation point for junior analysts.
• Contribute to SOC process and detection improvements.
• Communicate incidents with customers and internal teams.

Skills

SOC operations experience

Microsoft Sentinel exposure

Microsoft Defender exposure

Security incident investigation

Windows environments knowledge

Networking fundamentals

KQL exposure

PowerShell usage

Cybersecurity development mindset

Tools

Microsoft Sentinel

Microsoft Defender

PowerShell

KQL

Job description

I'm recruiting for a SOC Analyst to join a growing Security Operations team in Newcastle.

This is a great opportunity for either an established SOC Analyst or a strong 1st Line Analyst ready to take the next step. You'll be joining a growing team where you'll get hands‑on exposure to a broad Microsoft security environment, taking greater ownership of investigations and incidents while continuing to develop technically.

What you'll be doing

• Working at 2nd Line level, investigating and responding to security incidents through to resolution
• Monitoring customer environments and investigating SIEM alerts
• Proactively threat hunting and identifying potential security risks
• Supporting vulnerability assessment and remediation
• Working across the Microsoft security stack, including Sentinel, Defender and Entra
• Using KQL and PowerShell as part of investigations and automation
• Acting as an escalation point for more junior analysts
• Contributing to improvements across SOC processes and detection capabilities
• Communicating with customers and internal teams around security incidents

What I'm looking for

You don't necessarily need to tick every box. I'm interested in speaking to people with:

• Experience working within a SOC / Security Operations environment
• Exposure to Microsoft Sentinel and/or Microsoft Defender
• A good understanding of security incident investigation and response
• Knowledge of Windows environments and general networking/security principles
• Exposure to KQL would be beneficial
• A genuine desire to develop technically and progress within cyber security

Working pattern

Initially, the role will operate on a 4-on, 4-off night shift pattern as part of a transition period. Longer term, the team will move onto an 8-hour shift model.

The role is currently remote, with plans for the Newcastle team to spend more time together in the office as the local operation continues to grow.