Latest SOC Analyst Jobs

Spotlight

Senior Security Consultant (Delivery & Growth)

Client-facing consulting role leading end-to-end security engagements across security architecture, cloud security, DevSecOps, application security and security operations. You'll run workshops, design controls in AWS/Azure/GCP, produce risk-based deliverables and help identify follow-on work, contributing to proposals and account growth.

RiverSafe London

Hybrid Permanent

Spotlight

AWS Senior Platform Engineer (SC Eligible) – 1–2 Days a Month in Office

Design, build and operate secure AWS platforms using Terraform, Kubernetes/EKS and CI/CD for a London cloud consultancy's public and private sector clients. You'll own technical delivery within your area, create reusable modules and deployment patterns, and mentor less experienced engineers. Office presence is only 1–2 days a month, and SC clearance eligibility is mandatory.

Appvia London £75,000 – £90,000 pa

Hybrid Permanent

SOC Analyst

Monitor, triage and investigate security alerts across SIEM and wider security tooling, identifying indicators of compromise and conducting initial incident investigations. Support the full incident response lifecycle including containment, remediation and post-incident learning, while tuning detection rules to reduce false positives. Work with security and infrastructure teams on threat intelligence, trend reporting and continual service improvement.

Experis Winchester £41,000 – £50,000 pa

On-site Clearance Required

SOC Analyst

Investigating and responding to security incidents at 2nd Line level, monitoring customer environments and SIEM alerts, and threat hunting across a Microsoft security stack including Sentinel, Defender and Entra. Uses KQL and PowerShell for investigations and automation, acts as an escalation point for junior analysts, and supports vulnerability assessment and remediation. Initially on a 4-on, 4-off night shift pattern before moving to an 8-hour shift model.

Reed Technology Newcastle upon Tyne £35,000 – £45,000 pa

Remote Shift-work

SOC Analyst

Hands-on incident response role covering detection, triage, investigation, containment and recovery of cyber incidents in a complex enterprise environment. Day to day involves monitoring SIEM and EDR/XDR alerts, analysing logs, packet captures and forensic images, threat hunting, and mapping activity to MITRE ATT&CK. Also maintains playbooks, evidence records and post-incident reports, and briefs senior stakeholders.

Tank Recruitment London

SOC Analyst – Step into Shift Leadership

Hands-on SOC Analyst role sitting between L1 and L2, triaging and investigating security incidents using Microsoft Sentinel, Defender XDR and SentinelOne. Also acts as escalation point for a shift of around three analysts, monitoring SLAs, QA-ing tickets, leading handovers and coaching the team. Works a 4 on / 4 off, 7am-7pm shift with partial office attendance in Leeds.

Fynity Leeds £38,000 pa

Hybrid Shift-work

SOC Analyst – Step into Shift Leadership

Hands-on SOC role sitting between L1 and L2, triaging and investigating security incidents while leading a small shift of around three analysts. Acts as escalation point, monitors SLAs, QA tickets, runs shift handovers and coaches the team, using Microsoft Sentinel, Defender XDR and SentinelOne. Distinct as a stepping stone into shift leadership without full Team Lead responsibility.

Fynity Leeds £38,000 pa

Hybrid Shift-work

L2 SOC Analyst

Tier 2 SOC Analyst role focused on monitoring and investigating security alerts, triaging incidents and managing escalations. Acts as escalation point for Tier 1 analysts, conducts threat hunting, leads shifts and improves SOC processes and incident response playbooks. Suits an experienced L2 or strong L1 ready to step up.

Oscar Technology West Yorkshire £40,000 – £45,000 pa

On-site Permanent Shift-work

Lead SOC Analyst - DV Cleared

Lead the shift-based delivery of security monitoring, triaging and escalating cyber events while supervising a Senior SOC Analyst and acting as Duty Lead during live incidents. The role involves quality-assuring investigations, coordinating with Incident Responders and SOC Engineers, and mentoring analysts across a 24/7 operation.

Network IT Milton Keynes £80 ph

Contract Shift-work Clearance Required

Senior SOC Analyst

Operational leadership of a Security Monitoring function, independently investigating complex alerts, correlating multi-source data and escalating confirmed incidents. Validates detection rules and monitoring content before live deployment, onboards new systems and cloud services, and mentors Practitioner SOC Analysts. Shift-based 24/7 role requiring active DV clearance.

Network IT Milton Keynes £75 ph

Contract Shift-work Clearance Required

SOC Lead

Oversee Security Operations Centre activities, lead incident response efforts, and mentor a team of analysts. The role centres on cyber threat detection and incident investigation, with strong hands-on use of the Splunk Enterprise Security platform. It is a lead-level position within a remote security operations team.

NCC Group Remote

Hybrid

SOC Team Lead

Hands-on leadership role coordinating a SOC team of around 15, prioritising alerts, acting as escalation point and supporting threat detection, investigation and incident response. Involves client service reviews, reporting, coaching analysts and improving playbooks, using Microsoft Sentinel and Defender XDR, with scope to develop people-management skills.

Constant Recruitment Ltd Folkestone £45,000 – £50,000 pa

Remote

SOC Engineer - Manchester OR London - SC

Hands-on security operations role monitoring and triaging SIEM, EDR and cloud alerts, investigating incidents and supporting containment and response. Also provides second-line support across Azure, AWS, Windows Server, identity services, networking and backups, with log analysis, vulnerability remediation and documentation. Majority onsite in Manchester or London, with occasional on-call and shift handovers.

Circle Recruitment Manchester £30,000 – £45,000 pa

On-site Clearance Required

SOC Engineer - Manchester OR London - SC

Hands-on security operations role monitoring and triaging alerts from SIEM, EDR and cloud platforms, investigating incidents and supporting containment and response. Also provides second-line support across Azure, AWS, identity, network and end-user infrastructure, with log analysis, vulnerability remediation and runbook upkeep. Majority onsite in Manchester or London, with occasional on-call and shift handovers.

Circle Recruitment London £30,000 – £45,000 pa

On-site Clearance Required

Security Incident Management Analyst x 3

Governance and coordination role tracking security incidents across a complex multi-supplier SIAM environment, from identification through to closure. You coordinate updates between suppliers and security stakeholders, monitor SLAs and escalation trends, and produce incident reports, dashboards and audit-ready records. Distinct from a hands-on SOC position, with no threat hunting or technical remediation involved.

CBSbutler Holdings Limited trading as CBSbutler Preston £450 – £500 pd

On-site Contract Clearance Required

Senior Cyber Security Analyst / Engineer

Act as the escalation point for an external MSSP, investigating and responding to security incidents and performing detailed event analysis to identify threats. Drive hands-on remediation, detection engineering, and security reviews across cloud and enterprise collaboration environments, using frameworks like MITRE ATT&CK. A one-year fixed-term contract with strong extension potential, hybrid across Liverpool, Glasgow, or London.

Michael Page Liverpool £60,000 – £65,000 pa

Hybrid Contract

Security Engineer

Engineer, operate and optimise Microsoft Sentinel across one or more Log Analytics workspaces, owning platform health, ingestion pipelines, normalisation and enrichment. Build and maintain log onboarding from cloud, on-prem, SaaS and security tools, and integrate the SIEM with EDR, SOAR, threat intel and ITSM platforms. Also supports M&A onboarding of acquired environments into the enterprise SIEM.

eFinancialCareers London

On-site Permanent