Level 3 SOC Analyst

Salary: £52,000 - 92,000 per year

Requirements:

• Level 3 SOC Analyst or senior cyber security and security operations experience
• Experience onboarding, tuning, reporting, and configuring SIEM solutions
• Experience with threat intelligence
• Leadership and mentoring experience and skills
• Understanding of low-level concepts including operating systems and networking
• Commercial experience in penetration testing and/or security monitoring
• Understanding of networking and infrastructure design
• Knowledge or experience of one or more system administration environments, including Linux, Windows, or Mac
• Self-motivated with a flexible approach to working
• Excellent interpersonal skills with the ability to explain technical problems to non-technical business stakeholders at all levels
• Strong written and oral communication skills
• Active SC clearance or ability to obtain SC clearance
• SC-200 certification
• Preferred qualifications and experience include Network+, Security+, CySA+, CISMP, CISSP, Microsoft Defender for Endpoint, Identity and Cloud, IBM QRadar, Microsoft Sentinel, LogRhythm, KQL, Logic Apps, SOAR, Lighthouse, and DevOps in multi-customer environments

Responsibilities:

• Oversee completion of day-to-day checklists, including log review, management report scheduling and running, alert analysis, and escalation follow-up
• Stay current on cyber security trends and intelligence to guide the security analysis and identification capabilities of the CSOC team
• Provide oversight, guidance, and mentoring to L2 and L3 analysts, and fulfil SOC Manager responsibilities in the absence of the SOC Manager
• Oversee analysts as part of a virtual team of L1 and L2 analysts, including objectives setting, performance management, reviews, training and development, and BAU activities including shift cover
• Perform advanced event and incident analysis, including baseline establishment and trend analysis
• Support on-call arrangements as part of a rota to support L1 analysts working out of hours
• Support major incident response activity from a protective monitoring perspective, including identification, containment, and remediation of security-related threats
• Provide timely advice and guidance on response action plans for events and incidents based on incident type and severity
• Identify and implement improvements to procedures and processes with the SOC Managers approval
• Identify opportunities for SOC and client SIEM platform configuration improvements, use case development, monitoring rule creation, tuning, and optimisation
• Manage stakeholder and client reporting and engagement
• Assist in architectural design to facilitate onboarding of new information systems, including assessment, parsing, onboarding of log sources, and use case and rule development

Technologies:

• Cloud
• DevOps
• IBM
• Support
• Linux
• Network
• Security
• Windows

More:

We are Capita, a dynamic leader in consulting and digital services helping some of the UKs most recognised organisations transform and thrive. This is a permanent full-time Level 3 SOC Analyst role based in Belfast, working hybrid with 2 days in our Belfast office at HillView House. You will join a collaborative, forward-thinking team delivering cyber security monitoring, incident response, and expert guidance across diverse sectors including government, healthcare, education, and finance. We offer a competitive salary, 23 days holiday rising to 27, a paid volunteering day, generous family leave policies, a Cycle2Work scheme, pension, life assurance, and more. We are committed to learning, progression, inclusion, and building a workforce that reflects the communities we serve.

last updated 36 week of 2026