Tier 2 SOC Analyst

Salary: £49,000 - 89,000 per year

Requirements:

• Previous experience working within a Security Operations Centre (SOC), cyber security operations or incident response environment
• Experience investigating and responding to complex security alerts and incidents
• Strong knowledge of SIEM platforms and security event analysis
• Experience with endpoint detection and response (EDR) technologies
• A good understanding of incident response processes and methodologies
• Knowledge of common attack techniques, tactics and procedures, including the MITRE ATT&CK framework
• Experience analysing logs across endpoint, network, cloud or identity environments
• An understanding of threat intelligence and indicators of compromise
• Strong analytical and problem-solving skills
• Excellent written and verbal communication skills
• The ability to clearly communicate technical findings to both technical and non-technical stakeholders
• Experience with technologies such as Microsoft Sentinel, Splunk, Microsoft Defender, CrowdStrike or similar security platforms would be highly beneficial

Responsibilities:

• Investigate and analyse escalated security alerts from Tier 1 analysts
• Conduct detailed incident investigations to determine scope, impact and root cause
• Monitor and analyse activity across SIEM, EDR and other security platforms
• Identify indicators of compromise, suspicious activity and emerging threats
• Support incident response and containment activities
• Perform threat hunting activities to proactively identify potential security risks
• Escalate significant or complex incidents where appropriate
• Work closely with Tier 1 and Tier 3 analysts, incident responders and other technical teams
• Tune and improve detection rules and use cases to reduce false positives and improve threat detection
• Analyse logs and security events from endpoints, networks, cloud environments and other infrastructure
• Produce clear investigation reports and document incidents, findings and recommendations
• Maintain awareness of the latest cyber threats, vulnerabilities and attacker techniques
• Contribute to the ongoing development and improvement of SOC processes and capabilities

Technologies:

• Cloud
• Support
• Network
• Security
• Splunk

More:

We are a growing cyber security organisation strengthening our Security Operations capability with a Tier 2 SOC Analyst. You will join a collaborative cyber security team responsible for monitoring, investigating and responding to security threats across complex client environments. This role offers exposure to a wide range of technologies, security tools and client environments, with the opportunity to develop your technical expertise within a fast-paced SOC environment. We work as part of an experienced Security Operations team, with opportunities to investigate real-world security threats and develop your career across incident response, threat hunting and advanced security operations. The role is based in London on a hybrid working basis, with some flexibility depending on operational and client requirements.

last updated 36 week of 2026