Latest soc analyst Jobs

SOC Engineer

This role involves proactive security monitoring, incident investigation, and threat hunting within a growing UK-based SOC. The engineer will also focus on SIEM engineering, detection rule development, and automation using tools like Python and PowerShell, while helping to shape the SOC's processes and tooling. The position offers significant autonomy and influence in building out a new security operations function for key clients.

4Square Recruitment Ltd Cambridge, United Kingdom £40,000 – £80,000 pa

MDR Operations Performance Analyst

Analyze operational data from Sophos MDR services to identify inefficiencies, improve workflows, and enhance customer experience. Collaborate with SOC teams to translate insights into corrective actions, refine performance metrics, and integrate AI tools into analysis processes. Focus on continuous improvement in security operations through root cause analysis and quality assurance.

Sophos United States US$86,000 – US$143,000 pa

Remote Permanent

Cyber Security Lead

Lead and mentor a small SOC team while remaining actively involved in technical security operations, including incident investigation and response across enterprise, cloud, and OT environments. Drive improvements in detection, automation, and SOC processes within a complex technology landscape, balancing hands-on technical work with leadership responsibilities.

Rebel Recruitment Nottinghamshire, United Kingdom £65,000 – £70,000 pa

Hybrid Permanent

Cyber Security Operations Manager

Lead and develop a security operations team while managing the full incident lifecycle from detection to resolution. Design and improve security monitoring strategies using SIEM, EDR, and SOAR tools, and integrate threat intelligence to enhance defensive capabilities. Work closely with MSSPs and internal stakeholders to strengthen the organisation's security posture through continuous improvement and strategic planning.

Tatton Recruitment Pinhoe, Devon, EX4 9EY, United Kingdom £800 pd

Automation Engineer II, Falcon Complete

Develop and maintain security automation workflows and SOAR playbooks to enhance detection, triage, and response within a managed detection and response (MDR) environment. Integrate AI-powered solutions and scripting (PowerShell, Python) to streamline SOC operations, working closely with analysts to identify automation opportunities. Use Git for version control and contribute to improving analyst efficiency through scalable, AI-augmented workflows.

CrowdStrike United Kingdom

Remote Permanent

Principal Professional Services Engineer

Lead strategic SOC transformation and XSIAM deployment programs for enterprise customers, guiding modernization from initial planning through operationalization. Design and implement advanced detection strategies, log ingestion frameworks, and automation workflows to enhance security outcomes. Serve as a technical advisor and mentor high-performing professional services teams while collaborating with product teams to influence roadmaps.

Palo Alto Networks London, United Kingdom

Hybrid Permanent Clearance Required

Cyber Security Engineer

This role involves active monitoring, investigation, and response to cyber threats across endpoints, identity, email, and cloud services using tools like Microsoft Defender, Rapid7 SIEM, and Sophos. The engineer will triage incidents, perform root cause analysis, and improve detection rules and security posture. Collaboration with IT teams and contribution to security awareness and compliance initiatives are key aspects of the position.

Foresters Financial Br29Bf, United Kingdom £60,000 pa

Senior Technical Success Manager - Enterprise Accounts

A Senior Technical Success Manager partners with enterprise customers to drive adoption of Darktrace’s AI-driven cybersecurity platform, embedding it into daily security operations. The role involves identifying technical use cases, reducing risk, accelerating time-to-value, and ensuring long-term customer health. It requires deep technical understanding of cybersecurity, strong stakeholder engagement, and collaboration across internal teams to support renewals and expansion.

Darktrace France

On-site Permanent

Technical Success Manager - Enterprise Accounts

The role involves building trusted relationships with enterprise security and IT teams to drive technical adoption of Darktrace’s AI-driven cybersecurity platform. You'll create success plans, identify high-value use cases, and guide customers from deployment to active use, ensuring measurable risk reduction and operational integration. The position acts as a technical advisor, bridging customer needs with internal teams to improve health, retention, and expansion opportunities.

Darktrace London, UB8 1LQ, United Kingdom

Hybrid Permanent

SOC Manager

Lead and oversee the strategic direction of a Cyber Security Operations Centre, managing incident response, threat intelligence, and security operations. This role involves high-level governance, coordination with external vendors and MSSPs, and leading teams during major security incidents. The position requires a strategic leader rather than a hands-on analyst, with a focus on crisis management and security operations leadership.

Randstad Technologies Recruitment London, City And County Of the City Of London, United Kingdom £600 – £700 pd

Remote Contract Clearance Required

Cyber Security Analyst L1

This role involves monitoring security alerts using tools like Splunk and Cortex EDR, triaging incidents, and escalating confirmed threats to L2 analysts. The analyst will contribute to incident response, develop detection use cases, and assist in reporting and threat hunting as capabilities grow. The position supports both internal and external clients within a growing Security Operations Centre.

airbus United Kingdom

IT Security Analyst

This role involves supporting the IT Security Manager in maintaining and improving the organisation's information security posture, with a strong focus on governance, risk, compliance (GRC), and security awareness initiatives. The analyst will develop and enforce security policies, lead phishing and training campaigns, conduct risk assessments, and collaborate across departments to embed security practices. It is not a SOC or incident response engineering role, but includes contributing to incident response planning and operational security processes.

Hays Technology Leatherhead, Surrey, United Kingdom £50,000 – £60,000 pa

GRC Analyst

This role involves delivering GRC and compliance consulting services to clients across diverse industries, supporting audits, risk assessments, and compliance gap analyses. The analyst will lead security initiatives in cloud environments, facilitate incident response exercises, and help organisations strengthen their security posture. Key responsibilities include managing compliance evidence, engaging with auditors, and advising on frameworks such as ISO 27001, SOC 2, GDPR, and DORA.

Rise Technical Recruitment London, United Kingdom £45,000 – £55,000 pa

Threat Intelligence Analyst

This role involves monitoring and analysing the evolving cyber threat landscape to produce actionable intelligence that informs security architecture and risk management decisions. The analyst will assess threats, develop strategic recommendations, and collaborate with security architects, SOC teams, and stakeholders to strengthen enterprise defences. Work includes threat modelling, IOC analysis, and supporting platform security initiatives within a large-scale, regulated environment.

Matchtech London, United Kingdom £594 pd

Senior Security Operations Analyst

This role involves leading threat detection, incident response, and security monitoring at scale within a UK fintech. The analyst will develop and tune SIEM rules, conduct threat hunting, manage EDR systems, and contribute to security policies and controls. Collaboration with infrastructure, network, and DevOps teams is key to investigating and remediating security incidents.

Forward Role Leeds, United Kingdom £54,000 – £65,000 pa

Hybrid Permanent