KEY REQUIREMENTS

We are seeking an experienced Senior SOC Analyst who brings a strong background in security operations, threat detection, and incident response. This is a critical role that supports the defence of national infrastructure through proactive monitoring, analysis, and improvement of cybersecurity postures.

ESSENTIAL SKILLS AND EXPERIENCE:

• Proven experience in a Security Operations Centre (SOC) environment
• Strong hands-on expertise with SIEM tools such as Microsoft Sentinel and Splunk
• Solid understanding of network protocols and infrastructure (e.g. TCP/IP, VPNs, firewalls)
• Skilled in incident response and threat intelligence analysis
• Familiarity with Mitre Att&ck framework and advanced threat detection techniques
• Excellent analytical and problem-solving capabilities
• Able to provide mentorship and leadership within a SOC team

APPLY NOW AND PLEASE ENSURE YOU LET ME KNOW THE ANSWERS TO THE FOLLOWING:

• Are you happy to work onsite in Gosport?
• Why are you looking for a new role now?
• What salary are you on now and what are you looking for?
• What is your nationality?
• Have you been in the UK for at least 10 years?
• Have you been outside of the UK for more than 28 days on one occasion in the last 5 years?
• Do you currently hold any level of Security Clearance, and if so, which level?
• Are you happy to go through the Developed Vetting (DV) security clearance process?
• Where do you live?
• Would you need to relocate?
• What is your notice period?

As a Senior SOC Analyst, you will be at the forefront of digital defence—leading incident response, improving detection mechanisms, and mentoring junior analysts.

Your responsibilities will include:

• Analysing security incidents using advanced SIEM platforms (Microsoft Sentinel, Splunk)
• Leading incident response and driving improvements in detection and containment strategies
• Tuning and maintaining detection rules, using threat frameworks like Mitre Att&ck
• Collaborating with colleagues to enhance the overall capability and resilience of the Security Operations Centre
• Staying abreast of cyber threat developments and contributing to best practices and process enhancements
• Supporting the continuous development of the SOC team through knowledge sharing and mentoring