SOC Analyst Level 2 — Hybrid/Remote, Mentoring & Detection

Focus Group; Manchester; Hybrid; GBP 35,000 - 40,000; Full time

Benefits offered by this job

Holiday allowance

Hybrid working

Parental leave

Volunteer day

Company benefits

Job summary

Focus Group is seeking a SOC Analyst Level 2 to join our Security Operations Centre. You’ll investigate complex incidents, act as a technical escalation point, and help improve detection capabilities across key platforms.

The role supports hybrid/remote work, with a base in Manchester and a permanent contract. You will collaborate with customers and internal teams to strengthen security outcomes and reduce risk.

Qualifications

• Minimum 2 years' experience in a SOC/MSSP or cyber security operations environment.
• Hands-on experience investigating and triaging security alerts.
• Experience using RocketCyber, SaaS Alerts, or Bitdefender GravityZone EDR.

Responsibilities

• Investigate and validate security alerts escalated from Level 1 analysts across RocketCyber, SaaS Alerts and Bitdefender GravityZone EDR.
• Analyse endpoint, behavioural, and cloud identity events to identify malicious activity and signs of compromise.
• Perform root cause analysis on security incidents including phishing attacks and MFA-related threats.
• Coordinate response activities with internal engineering teams and customer stakeholders.
• Mentor Level 1 SOC Analysts and contribute to playbooks and detection improvements.

Skills

SOC experience

Incident investigation

Analytical thinking

Mentoring junior analysts

Communication skills

Tools

RocketCyber

SaaS Alerts

Bitdefender GravityZone EDR

Azure/Microsoft 365 security tooling

Job description

Focus Group is seeking a SOC Analyst Level 2 to join our Security Operations Centre. You’ll investigate complex incidents, act as a technical escalation point, and help improve detection capabilities across key platforms.

The role supports hybrid/remote work, with a base in Manchester and a permanent contract. You will collaborate with customers and internal teams to strengthen security outcomes and reduce risk.