Home
Jobs
Block MB
Security Operations Center Analyst

Security Operations Center Analyst

On site

London, United kingdom

£ 95,000 /year

Full Time

19-02-2026

Share this job:

Score my CV

Skills

Communication Network Security Incident Response Splunk Monitoring Analytical Thinking

Job Specifications

(Senior) SOC Analyst/Cyber Security Enigneer

Salary: £ 70.000 - 95.000

Location: Central London

On behalf of a client, we’re are currently looking for an experienced Security Operations Centre (SOC) Analyst to join a high-performing cyber team supporting critical IT security functions. This role is ideal for someone with solid experience in security monitoring, incident handling, and practical detection engineering across modern enterprise environments.

What you’ll do

Actively monitor and evaluate security telemetry from SIEM platforms, network logs, EDR/XDR systems, IDS/IPS and other security controls to identify suspicious activity and potential threats.
Triage alerts, investigate incidents and coordinate response steps to mitigate risk, including root-cause analysis and containment activities.
Develop and refine detection content such as correlation rules, use cases, response playbooks and alert tuning to improve signal quality and reduce false positives.
Leverage threat context and intelligence to enrich investigations and enhance overall detection capability.
Collaborate closely with wider IT, risk, compliance and technical teams to ensure coordinated cyber response and security improvements.
Contribute to ongoing SOC process development, documentation and performance optimisation.

Your profile

Several years’ experience performing SOC-style security monitoring and incident response in a live environment.
Hands-on experience with SIEM tooling (e.g., Splunk, Microsoft Sentinel or similar), endpoint detection and response technology and network security fundamentals.
Practical understanding of network protocols and the ability to interpret log and packet data to recognise anomalous behaviour.
Experience applying established threat frameworks (e.g., MITRE ATT&CK, emerging cyber tradecraft) to detection and response activities.
Strong analytical thinking and clear communication skills, with the ability to explain technical findings to both technical and non-technical stakeholders.

Nice-to-haves

Experience tuning detection logic, developing automated responses, or scripting integration tasks.
Certifications such as Security+, CySA+, GIAC or equivalent.