SOC Analyst L2: Threat Detection & Incident Response

Communicate Technology; Leeds; On-site; GBP 35,000 - 52,000; Full time

Job summary

Communicate SOC is seeking an experienced L2 SOC Analyst to join our MSSP security operations centre. You will help protect client environments through threat detection, incident investigation, and ongoing monitoring improvements.

You will act as an escalation point for Tier 1 analysts, investigate complex events and support the development of detection capabilities across multiple customer environments, with an on-call rota as part of a Monday–Friday shift.

Qualifications

• Experience working in a SOC, MSSP, MDR, or cyber security operations environment.
• Experience investigating and responding to incidents across endpoint, network, cloud, and identity platforms.
• Strong understanding of security operations, incident response, and threat detection methodologies.
• Hands-on with SIEM platforms such as CrowdStrike, Microsoft Sentinel, Splunk, QRadar, or similar.
• Expertise with EDR/XDR technologies, including Microsoft Defender XDR and CrowdStrike.
• Good working knowledge of Windows, Active Directory, Microsoft 365, networking, and authentication technologies.
• Certifications such as SC-200, Security+, CySA+, AZ-500 or equivalent are desirable.

Responsibilities

• Investigate security alarms end-to-end and validate escalations from Tier 1 analysts.
• Analyse logs, alerts, and threat intelligence to determine the scope, impact, and root cause of security incidents.
• Correlate events across multiple security technologies to identify malicious activity and IOC indicators.
• Act as a technical escalation point, providing guidance to junior analysts.
• Document investigations and remediation actions within case management systems.

Job description

Communicate SOC is seeking an experienced L2 SOC Analyst to join our MSSP security operations centre. You will help protect client environments through threat detection, incident investigation, and ongoing monitoring improvements.

You will act as an escalation point for Tier 1 analysts, investigate complex events and support the development of detection capabilities across multiple customer environments, with an on-call rota as part of a Monday–Friday shift.