In this role, you will lead advanced security investigations and act as an escalation point for high-severity incidents. You will guide L1 analysts, perform root-cause analysis, and coordinate containment and remediation with IT/OT stakeholders. You will help tune detection capabilities and contribute to playbooks and SOC exercises. This position sits within a 24/7 SOC team supporting a cutting-edge compute environment in London, with shift-based work and a dedicated allowance. You will make a tangible impact on security posture and incident response maturity.
Pay / Benefits
shift allowance
24/7 shift coverage
competitive salary and package
opportunity to work on advanced compute platforms
global professional services environment
Responsibilities
Investigate escalated security incidents to determine attack vectors, scope, root cause, and potential business impact
Correlate events across multiple data sources to build a comprehensive incident narrative
Execute containment, eradication, and recovery activities in coordination with IT/OT stakeholders
Lead response for medium to high-severity incidents and document detailed investigation reports
Conduct tuning of detection rules and thresholds in collaboration with the Security Content Engineer
Support continuous improvement by identifying gaps in detection coverage and playbooks
Mentor and provide technical guidance to L1 Analysts
Participate in periodic SOC exercises and simulated incident response drills
Be part of 24/7 SOC Team, need to work in shifts
Key requirements
Bachelor’s degree in Cybersecurity, Computer Science, or related field
3–5 years in SOC, Incident Response, or Threat Analysis roles
Strong analytical mindset, in-depth knowledge of SIEM/EDR tools, malware behaviour, and incident handling methodologies
We use essential cookies to make this site work. With your permission we would also like to use the optional cookies below. Nothing optional is set until you choose, and you can change your mind at any time from "Cookie settings" at the bottom of every page. Cookie policy.
Essential — keep the site working and secure, and remember the choice you make here. Always on.