SOC Security Analyst: Threat Hunting & Incident Response

CamWebDir; Greater London; Hybrid; GBP 55.000 - 75.000; Vollzeit

Benefits dieser Stelle

Health benefits and wellbeing

5% pension increase

Annual leave 25 days plus festive half

Bonus program

Cycle to work scheme

Community initiatives

Zusammenfassung

PA Consulting is seeking an Information Security Analyst for its Security Operations Centre in a hybrid role. The position focuses on monitoring and responding to security incidents, threat hunting, and improving detections and practices.

You will work 2-3 days in the office each week. Responsibilities include investigating alerts across SIEM/EDR, performing threat hunts, developing detections, and supporting vulnerability management and post-incident reviews.

Qualifikationen

• Experience in a SOC or security operations role.
• Strong log analysis and correlation across endpoints, identity, email, cloud and network telemetry.
• Experience using SIEM and EDR/XDR platforms to investigate alerts and support containment and remediation.
• Ability to document investigations clearly for technical and non-technical stakeholders.
• Knowledge of attacker techniques, phishing, account compromise, malware, vulnerabilities and cloud security risks.
• Willingness to participate in the paid out-of-hours on-call rota.

Aufgaben

• Monitor and investigate security alerts across SIEM, EDR/XDR, email security, cloud platforms, identity, network security and data loss prevention tooling.
• Triage security events, determine scope and impact, coordinate containment and remediation, and maintain clear investigation records and evidence.
• Perform proactive threat hunting using threat intelligence, attacker techniques and hypotheses relevant to PA.
• Develop and tune detections, use cases, dashboards, playbooks and automation to improve coverage and reduce unnecessary alert volume.
• Support digital forensic analysis, malware and phishing analysis, and post-incident reviews as required.
• Analyse relevant threat intelligence, vulnerabilities and supplier advisories, assess PA exposure and recommend proportionate actions.
• Support vulnerability and exposure management through reporting, prioritisation, tracking and engagement with asset owners.
• Carry out security checks requested by the business, including software, website and identity-related checks, and provide practical risk-based advice.
• Contribute to security improvement projects, operational documentation, knowledge sharing, metrics and reporting.
• Participate in the paid out-of-hours on-call rota and respond to high-severity incidents when required.

Kenntnisse

SOC experience

Incident response

Log analysis

SIEM/EDR

Threat hunting

Documentation

Tools

SIEM platforms

EDR/XDR platforms

Jobbeschreibung

PA Consulting is seeking an Information Security Analyst for its Security Operations Centre in a hybrid role. The position focuses on monitoring and responding to security incidents, threat hunting, and improving detections and practices.

You will work 2-3 days in the office each week. Responsibilities include investigating alerts across SIEM/EDR, performing threat hunts, developing detections, and supporting vulnerability management and post-incident reviews.