SOC Analyst - Tier 2 and Tier 3 (SC and DV)

Pigment Consulting; Manchester; On-site; GBP 60,000 - 74,000; Full time

Job summary

Pigment Consulting is expanding its cybersecurity capability and seeking SC-Level and DV-Level Cleared SOC Analysts to join our 24/7/365 on-site team in Manchester. The role involves 12-hour shifts on a 4-on-4-off rota, including days, nights, weekends, public holidays, and other religious holidays.

We value a collaborative, cohesive team culture built on cooperation, knowledge transfer, and teamwork, and we welcome consultants who are passionate about supporting the public sector while using

Qualifications

• Proven experience within a SOC, security monitoring or incident response environment.
• Strong SIEM and security event investigation experience.
• Experience with EDR/XDR technologies.
• Good understanding of cyber attack techniques and MITRE ATT&CK.
• Experience investigating common security incidents and threats.
• For Tier 3, the ability to lead complex investigations and provide technical direction.
• Active SC or DV Clearance.
• Ability to work fully on-site in Manchester when on shift.

Responsibilities

• Investigate and respond to security incidents escalated from Tier 1.
• Conduct detailed investigation of SIEM, EDR, network and authentication alerts.
• Perform threat hunting and identify indicators of compromise.
• Investigate phishing, malware, credential compromise and suspicious activity.
• Support containment, eradication and recovery.
• Develop and improve detection rules and playbooks.
• Produce high-quality incident documentation and reports.
• Support and mentor Tier 1 analysts.
• Lead complex and high-severity security investigations.
• Provide advanced threat hunting and incident response.
• Carry out malware, endpoint, network and forensic investigation.
• Develop advanced detections and response capabilities.
• Perform root-cause analysis and post-incident investigation.
• Support major incident response.
• Work closely with security engineering and infrastructure teams.
• Provide technical guidance and mentoring to Tier 1 and Tier 2 SOC analysts.

Skills

SIEM experience

EDR/XDR

MITRE ATT&CK

Incident investigation

Mentoring Tier 1/2

On-site Manchester

Tools

Security tooling

Office 365

Job description

Salary: £60,000 - 74,000 per year

Requirements

• Proven experience within a SOC, security monitoring or incident response environment.
• Strong SIEM and security event investigation experience.
• Experience with EDR/XDR technologies.
• Good understanding of cyber attack techniques and MITRE ATT&CK.
• Experience investigating common security incidents and threats.
• For Tier 3, the ability to lead complex investigations and provide technical direction.
• Active SC or DV Clearance.
• Ability to work fully on-site in Manchester when on shift.

Responsibilities

• Investigate and respond to security incidents escalated from Tier 1.
• Conduct detailed investigation of SIEM, EDR, network and authentication alerts.
• Perform threat hunting and identify indicators of compromise.
• Investigate phishing, malware, credential compromise and suspicious activity.
• Support containment, eradication and recovery.
• Develop and improve detection rules and playbooks.
• Produce high-quality incident documentation and reports.
• Support and mentor Tier 1 analysts.
• Lead complex and high-severity security investigations.
• Provide advanced threat hunting and incident response.
• Carry out malware, endpoint, network and forensic investigation.
• Develop advanced detections and response capabilities.
• Perform root-cause analysis and post-incident investigation.
• Support major incident response.
• Work closely with security engineering and infrastructure teams.
• Provide technical guidance and mentoring to Tier 1 and Tier 2 SOC analysts.

Technologies

• Support
• Network
• Security
• Office 365

More

Pigment Consulting is an IT-enabled change consultancy working in partnership with other consultancies, government departments, and private sector organisations to deliver programmes across Central Government, Defence & National Security, and Policing. We are expanding our cybersecurity capability and seeking SC-Level and DV-Level Cleared SOC Analysts to join our 24/7/365 on-site team in Manchester. The role involves 12-hour shifts on a 4-on-4-off rota, including days, nights, weekends, public holidays, and other religious holidays. We value a collaborative, cohesive team culture built on cooperation, knowledge transfer, and teamwork, and we welcome consultants who are passionate about supporting the public sector while using their SOC expertise.

last updated 36 week of 2026