Level 3 SOC Analyst

Overview

As a Level 3 SOC Analyst, you will lead高级 incident analysis and oversee a team of L1–L3 analysts within Capita’s CSOC. You’ll triage and contextualize threats, leverage threat intelligence, and guide response actions based on business impact. The role involves onboarding and tuning security tooling, enabling proactive detection, and supporting Major Incident Response. You’ll work hybrid in Belfast, contributing to secure, scalable security operations aligned with Capita’s values.

Pay / Benefits

• Hybrid - 2 days in Belfast
• Competitive salary
• 23 days holiday (pro rata to 27)
• Paid volunteering day
• Generous family leave policies
• Cycle2Work scheme

Responsibilities

• Oversee daily SOC tasks including log review, alerts, and escalation follow-ups
• Stay current on cyber security trends to guide analysis and detection capabilities
• Provide guidance and mentoring to L2/L3 analysts and act as SOC Manager in their absence
• Lead a virtual team of analysts with objective setting, performance reviews, and training
• Perform advanced event/incident analysis and baseline/trend analysis
• Support on-call arrangements and Major Incident Response activities
• Advise on response action plans based on incident type/severity
• Identify and implement process improvements and SOC/CIEM configurations
• Assist in onboarding new information systems and developing use cases and rules
• Engage with stakeholders and clients to report on security operations

Key requirements

• Level 3 SOC Analyst / Senior Cyber Security and security operations experience
• Experience onboarding, tuning, reporting and configuring SIEM
• Experience with threat intelligence
• Leadership and mentoring experience
• Understanding of OS and networking concepts
• Commercial experience in Penetration Testing and/or Security Monitoring
• Networking/infrastructure design understanding
• Knowledge/experience with System administration (Linux, Windows, Mac)
• Self-motivated with flexible working style
• Strong interpersonal and communication skills
• SC clearance eligible

• Strong communication skills
• Leadership and mentoring
• Ability to explain technical issues to non-technical stakeholders
• SIEM onboarding, tuning, reporting and configuration
• Threat intelligence integration and analysis
• Experience with IBM QRadar, Microsoft Sentinel, MDE, MDI, Defender for Cloud

Full job description from WhatJobs. Apply for this role →