SOC Analyst- Level 2- Hybrid Greater London

DCL; City Of London; Hybrid; GBP 40,000 - 60,000; Full time

Job summary

A cybersecurity firm in London seeks an experienced SOC Analyst (Level 2) to enhance their managed security team. The role involves hands-on work with Microsoft Sentinel and Defender XDR, investigating alerts and improving client security. Candidates should have strong experience with query languages and understanding of security tactics. This position is a hybrid role, combining remote work with in-office tasks.

Qualifications

• Hands-on experience with Microsoft Sentinel and Defender XDR.
• Ability to analyse network and log data.
• Critical thinking skills under pressure.

Responsibilities

• Investigate and respond to security activity across SIEM and endpoint tools.
• Support automation initiatives to streamline response processes.
• Help maintain visibility and performance across SOC platforms.

Skills

Practical experience using Microsoft Sentinel

Confident working with KQL or similar query languages

Understanding of attacker tactics and response techniques

Experience supporting multiple customer environments

Education

SC-200 certifications

Job description

Overview

SOC Analyst- Level 2- Hybrid Greater London

New opportunity created through continued growth.

We’re looking for a SOC Analyst (Level 2) to strengthen a growing managed security team. You’ll work hands-on with Microsoft Sentinel and Defender XDR, investigating alerts, responding to incidents, and helping improve how clients stay protected.

This role is ideal for someone who enjoys unravelling security events, thinking critically under pressure, and making a real difference day to day.

What you’ll do

• Investigate and respond to security activity across SIEM and endpoint tools
• Analyse network and log data to uncover real threats
• Support automation initiatives to streamline response processes
• Help maintain visibility, data flow, and performance across SOC platforms

What you’ll need

• Practical experience using Microsoft Sentinel and Defender XDR
• Confident working with KQL or similar query languages
• Understanding of attacker tactics and response techniques
• SC-200 certifications would be nice.
• Experience supporting multiple customer environments
• Please note: Sponsorship is not available.