SOC Analyst - Level 3

ARM (Advanced Resource Managers); Greater London; Hybrid; GBP 45,000 - 75,000; Full time

Job summary

ARM (Advanced Resource Managers) is seeking a SOC Analyst - Level 3 for a 6-month contract combining remote work with on-site presence in London. The role focuses on detecting and responding to security incidents within a SIEM-enabled environment.

You will investigate alerts, analyse Windows and Linux artefacts, document findings, and support the incident response lifecycle from preparation to lessons learned. The position is Inside IR35 with negotiable rates.

Qualifications

• Hands-on experience investigating security alerts and incidents using SIEM
• Experience analysing Windows and Linux host artefacts, authentication activity
• Working knowledge of incident response life cycle activities including preparation, detection, analysis, containment, eradication, recovery and lessons learned.
• Experience producing incident records, investigation reports, management updates and post-incident findings.

Responsibilities

• Investigate security alerts and incidents using SIEM.
• Analyse Windows and Linux host artefacts and authentication activity.
• Apply incident response lifecycle activities from preparation to lessons learned.
• Produce incident records, investigation reports and management updates.

Skills

SIEM

Incident response

Security monitoring

Windows

Linux

Tools

Windows

Linux

Job description

SOC Analyst - Level 3
6 months
Remote/London - 3 days a week
£Negotiable - INSIDE IR35* Practical experience in cyber incident response, security monitoring or a Security Operations Centre environment.

• Hands-on experience investigating security alerts and incidents using SIEM
• Experience analysing Windows and Linux host artefacts, authentication activity
• Working knowledge of incident response life cycle activities including preparation, detection, analysis, containment, eradication, recovery and lessons learned.
• Experience producing incident records, investigation reports, management updates and post-incident findings.