About the Role

As a Tier 3 Cyber Security Analyst, you’ll work within the CSOC to detect, investigate, and respond to advanced security threats across customer environments. You’ll support the CSOC Manager in day‑to‑day operations, act as a technical escalation point for analysts, and provide out‑of‑hours escalation support when required. This is a highly technical, hands‑on role where you’ll lead threat hunting, develop and tune SIEM detections, and help mature SOC processes and response playbooks. You’ll also play a key role in mentoring analysts and raising the overall technical capability of the SOC. Technology innovation is part of our DNA, and this role will continue to evolve as AI‑driven detection, automation, and response capabilities are introduced.

Key Responsibilities

• Develop, tune, and maintain SIEM detection rules across customer environments
• Conduct proactive threat hunting and threat intelligence research
• Act as a senior escalation point for Cyber Security Analysts
• Coach and mentor analysts, supporting skills development and knowledge sharing
• Investigate complex security incidents and identify root causes
• Lead continual service improvement initiatives within the CSOC
• Compile and present monthly SOC reporting, advising on security posture improvements
• Support client service reviews and articulate cyber risk in business‑friendly language
• Conduct security assessments, including vulnerability testing and risk analysis
• Ensure high‑quality incident resolution and consistent SOC performance

Required Experience & Skills

• 2–4 years’ experience in a Security Operations or similar cyber role
• Strong experience investigating and responding to cyber security incidents
• Hands‑on experience with SIEM, EDR, and email security tooling
• Experience working in a Microsoft XDR SOC
• Strong KQL (Kusto Query Language) skills
• Experience mentoring and supporting analysts at different levels
• Excellent written and verbal communication skills
• Strong analytical thinking, judgement, and attention to detail
• A proactive, self‑motivated approach and passion for cyber security

Desirable Qualifications

• Certifications such as AZ‑500, SC‑300, SC‑100, SC‑200, or SANS certifications
• Experience as an incident responder
• Experience developing bespoke detection rules or response playbooks
• Knowledge of vulnerability assessment and remediation
• Awareness of balancing business needs with technical and security standards

Benefits

• Healthcare cash plan
• Referral bonus scheme of £1000
• Access to LinkedIn Learning platform
• Casual dress policy
• Company Pension Scheme
• Company social events
• 25 days annual leave plus public/bank holidays
• Purchase of annual leave scheme

Life at [Employer hidden — sign up to reveal]

Our company values shape who we are as a business, what we stand for and how we work. Hiring people with our values at heart, is very important as we see [Employer hidden — sign up to reveal] grow.

• I am High Performing: I like to raise the bar, we look at creating opportunities to increase quality and improve efficiency, we strive for service excellence.
• I am Passionate: We build team success and celebrate them together, I am enthusiastic and energetic, I care about the people I work with and we support one another.
• I Have a Can-Do Attitude: I am not afraid to step outside my comfort zone, we are not afraid to challenge status quo, we get stuff done!

So, if you feel like you can make a tangible difference, apply today, and join us on this journey.

Here at [Employer hidden — sign up to reveal] we aim to be somewhere everyone can be themselves. We are committed to encouraging a diverse and inclusive community where everyone irrespective of who they are, or their background, can feel equal and supported. We encourage applications from people of all backgrounds. Please get in touch if you are concerned about any difficulties you may face during your recruitment process, so we adjust accordingly.

Part of our application process includes a set of ED&I questions. Please note, each question has a ‘prefer not to say’ option.

Apply Now Through Our Online Application Gateway

Back to Current Vacancies