SOC Analyst: Real-Time Threat Hunter & Incident Responder

Inforcer Ltd.; United Kingdom; Remoto; GBP 40.000 - 65.000; Tempo pieno

Vantaggi offerti da questo lavoro

Steep learning curve

Real impact

Transparency

Global team

Team socials

Employee recognition

Descrizione del lavoro

Inforcer Ltd. is seeking a SOC Analyst to monitor, investigate and respond to security threats across our environment, using SIEM, EDR and threat intelligence tools.

This is an operational role with real ownership and regular out-of-hours work, compensated as overtime. You will triage alerts, perform in-depth log analysis across our customer estate, escalate incidents as needed, and help improve detection content to reduce noise and close gaps.

Competenze

• Hands-on alert triage experience in a SOC, MSP, MSSP or internal security team.
• Working with KQL to query sign-in, audit and hunting data.
• Strong Microsoft 365 and Entra ID security knowledge, including MFA, conditional access and audit trails.

Mansioni

• Monitor in-house tooling for real-time alerts and suspicious activity.
• Triage, investigate, and document security incidents following playbooks.
• Perform in-depth log analysis across the customer estate.
• Escalate incidents as needed and collaborate with internal teams.
• Support containment and remediation efforts.
• Contribute to improving detection content by identifying gaps and tuning opportunities.
• Participate in threat hunting exercises and proactive investigations.
• Assist with onboarding and operationalising new security tools and processes.

Conoscenze

Hands-on alert triage

KQL

Microsoft 365 security

MITRE ATT&CK

Judgement

Written English

Descrizione del lavoro

Inforcer Ltd. is seeking a SOC Analyst to monitor, investigate and respond to security threats across our environment, using SIEM, EDR and threat intelligence tools.

This is an operational role with real ownership and regular out-of-hours work, compensated as overtime. You will triage alerts, perform in-depth log analysis across our customer estate, escalate incidents as needed, and help improve detection content to reduce noise and close gaps.