UK Remote SOC Incident Response Analyst - Immediate Contract

TechNET; United Kingdom; Remote; GBP 65,000 - 92,000; Full time

Job summary

TechNET is urgently seeking two experienced Cyber Incident Response / SOC Analysts to support a UK-based security operations team. The role focuses on security alert monitoring, incident investigation, phishing triage and threat response, with an initial 4-week contract and UK remote working after onboarding.

The team is looking for L1/L2 SOC/CIRT analysts with strong Microsoft Defender and Sentinel experience; L3s are also welcome for short-term engagements.

Qualifications

• 3-5 years' experience in a Cyber Incident Response Team (CIRT) or Security Operations Centre (SOC)
• Hands-on experience with Microsoft Defender for alert investigation and response
• Operational experience with Microsoft Sentinel SIEM for alert triage and investigation
• Experience using Cisco Umbrella for security monitoring and threat protection
• Familiarity with Infosec IQ and Abnormal Security platforms
• Experience responding to threat intelligence alerts and indicators of compromise

Responsibilities

• Monitor, triage and investigate security alerts from Defender and Sentinel.
• Investigate and respond to potential cyber incidents and remediation actions.
• Triage and investigate phishing emails, identify malicious links and IOCs.
• Review threat intelligence reports and assess risks to the organisation.
• Contain incidents with user and device isolation when needed.
• Escalate complex or high-severity incidents through case management.
• Maintain accurate incident records and actions taken.
• Support the wider security operations team for incident response and continuity.

Skills

Microsoft Defender

Microsoft Defender SIEM

Microsoft Sentinel

Phishing analysis

Threat intelligence

Incident response

SOC operations

Tools

Cisco Umbrella

Infosec IQ

Abnormal Security

Job description

TechNET is urgently seeking two experienced Cyber Incident Response / SOC Analysts to support a UK-based security operations team. The role focuses on security alert monitoring, incident investigation, phishing triage and threat response, with an initial 4-week contract and UK remote working after onboarding.

The team is looking for L1/L2 SOC/CIRT analysts with strong Microsoft Defender and Sentinel experience; L3s are also welcome for short-term engagements.