SOC Analyst Level 2 — Hybrid/Remote with Growth Path

Focus Group; Pendlebury; Hybrid; GBP 35,000 - 40,000; Full time

Benefits offered by this job

Holiday allowance - 24 days + bankHO +

Birthday leave

Hybrid working options

Enhanced maternity/paternity/adoption

Volunteer day

Job summary

Focus Group is seeking a SOC Analyst Level 2 in Manchester to join our Security Operations Centre. You will investigate escalated alerts, mentor junior analysts, and improve detection capabilities across RocketCyber, SaaS Alerts, and Bitdefender GravityZone EDR.

Hybrid/remote work options are available, with emphasis on collaboration and continuous improvement of customer security outcomes. Strong communication and mentoring skills are essential.

Qualifications

• Minimum 2 years' experience within a SOC, MSSP, or cyber security operations environment.
• Hands-on experience investigating and triaging security alerts.
• Experience using security platforms such as RocketCyber, SaaS Alerts, or Bitdefender GravityZone EDR.
• Strong understanding of Microsoft 365 security threats, including suspicious logins, MFA attacks, and identity-based compromises.
• Knowledge of attacker techniques and the MITRE ATT&CK framework.
• Strong analytical and investigative skills with the ability to perform root cause analysis.
• Experience correlating security data across multiple sources and platforms.
• Excellent written and verbal communication skills.
• Ability to explain technical information to both technical and non-technical stakeholders.
• A collaborative mindset with a passion for mentoring and supporting colleagues.
• Strong attention to detail and commitment to high-quality documentation.
• Comfortable working independently within a remote-first environment.

Responsibilities

• Investigate and validate security alerts escalated from Level 1 analysts across RocketCyber, SaaS Alerts, and Bitdefender EDR platforms.
• Analyse endpoint, behavioural, and cloud identity events to identify malicious activity and signs of compromise.
• Perform root cause analysis on security incidents including phishing attacks, suspicious inbox rules, account compromise, and MFA-related threats.
• Correlate intelligence across multiple platforms to understand business impact and determine appropriate response actions.
• Coordinate response activities with internal engineering teams and customer stakeholders.
• Ensure investigations are fully documented with high-quality case notes and clear escalation paths.
• Support incident reviews and contribute to improvements in playbooks, detection logic, and tooling.
• Act as a technical escalation point and mentor for Level 1 SOC Analysts.
• Assist with customer onboarding into the SOC monitoring stack and support service alignment activities.
• Identify opportunities to improve alert quality, reduce false positives, and enhance SOC efficiency.
• Stay up to date with emerging cyber threats, attack techniques, and industry best practices.

Skills

SOC experience

Alert triage

Threat detection

MFA threats

MITRE ATT&CK

Analytical skills

Documentation

Remote collaboration

Education

Microsoft SC-200

CompTIA Security+

GCIH

BTL1

Tools

RocketCyber

SaaS Alerts

Bitdefender GravityZone EDR

Job description

Focus Group is seeking a SOC Analyst Level 2 in Manchester to join our Security Operations Centre. You will investigate escalated alerts, mentor junior analysts, and improve detection capabilities across RocketCyber, SaaS Alerts, and Bitdefender GravityZone EDR.

Hybrid/remote work options are available, with emphasis on collaboration and continuous improvement of customer security outcomes. Strong communication and mentoring skills are essential.