SOC Analyst: Real-Time Threat Hunter & Incident Responder

Inforcer Ltd.; United Kingdom; Remote; GBP 40,000 - 65,000; Full time

Benefits offered by this job

Steep learning curve

Real impact

Transparency

Global team

Team socials

Employee recognition

Job summary

Inforcer Ltd. is seeking a SOC Analyst to monitor, investigate and respond to security threats across our environment, using SIEM, EDR and threat intelligence tools.

This is an operational role with real ownership and regular out-of-hours work, compensated as overtime. You will triage alerts, perform in-depth log analysis across our customer estate, escalate incidents as needed, and help improve detection content to reduce noise and close gaps.

Qualifications

• Hands-on alert triage experience in a SOC, MSP, MSSP or internal security team.
• Working with KQL to query sign-in, audit and hunting data.
• Strong Microsoft 365 and Entra ID security knowledge, including MFA, conditional access and audit trails.

Responsibilities

• Monitor in-house tooling for real-time alerts and suspicious activity.
• Triage, investigate, and document security incidents following playbooks.
• Perform in-depth log analysis across the customer estate.
• Escalate incidents as needed and collaborate with internal teams.
• Support containment and remediation efforts.
• Contribute to improving detection content by identifying gaps and tuning opportunities.
• Participate in threat hunting exercises and proactive investigations.
• Assist with onboarding and operationalising new security tools and processes.

Skills

Hands-on alert triage

KQL

Microsoft 365 security

MITRE ATT&CK

Judgement

Written English

Job description

Inforcer Ltd. is seeking a SOC Analyst to monitor, investigate and respond to security threats across our environment, using SIEM, EDR and threat intelligence tools.

This is an operational role with real ownership and regular out-of-hours work, compensated as overtime. You will triage alerts, perform in-depth log analysis across our customer estate, escalate incidents as needed, and help improve detection content to reduce noise and close gaps.