SOC Analyst: AI-Driven Threat Detection & IR

BeyondTrust; Greater Manchester; On-site; GBP 40,000 - 60,000; Full time

Benefits offered by this job

Fully remote in the UK

Bupa Private Healthcare

Medicash Benefit

Life insurance

Job summary

BeyondTrust is seeking a SOC Analyst to join our Cyber Defense Operations team. You will monitor, triage, and respond to security events across SIEM, EDR, and cloud logs, while integrating AI-driven tools to speed detection and triage.

You will collaborate with threat hunters, incident responders, and detection engineers to strengthen our security posture, based in the UK with a remote-first approach.

Qualifications

• 2+ years in SOC/security operations or incident response.
• Understanding of MITRE ATT&CK, network protocols, and endpoint behavior.
• Experience with at least one SIEM platform and writing detection queries.
• Familiarity with EDR platforms and cloud environments (IaaS preferred).

Responsibilities

• Monitor and triage security alerts across SIEM, EDR, and CSPM platforms.
• Investigate alerts to determine scope, severity, and escalation needs.
• Leverage AI-assisted triage and enrichment to accelerate analysis.
• Classify, document, and track alerts through the full lifecycle.
• Participate in or lead incident response engagements from detection through remediation.
• Produce clear incident summaries and post-incident reports for technical and leadership audiences.

Skills

SOC operations

MITRE ATT&CK

SIEM

EDR

Cloud logs

AI tools

Communication

Education

Bachelor's degree

Tools

PowerShell

Python

SOAR

Job description

BeyondTrust is seeking a SOC Analyst to join our Cyber Defense Operations team. You will monitor, triage, and respond to security events across SIEM, EDR, and cloud logs, while integrating AI-driven tools to speed detection and triage.

You will collaborate with threat hunters, incident responders, and detection engineers to strengthen our security posture, based in the UK with a remote-first approach.