Future Tech Jobs Future Tech Jobs

SOC Analyst Jobs

The eyes and ears of an organisation's cyber defences. SOC Analysts monitor, detect, and respond to security incidents in real-time.

Open roles
15
Salary range
£30k – £68k
Hiring companies
10
View 15 live roles → Get an alert

SOC Analysts are the front-line defenders in the world of cyber security. Working in Security Operations Centres (SOCs), they monitor and analyse security events to identify and respond to potential threats. These roles are critical for organisations of all sizes, from scaleups to large enterprises, ensuring that security incidents are detected and mitigated quickly. SOC Analysts often work in shifts, providing 24/7 coverage to maintain a constant watch over the organisation's digital assets.

What the role does

Inside the role of an SOC Analyst

A typical week for a SOC Analyst is a mix of monitoring, incident response, and reporting. They spend a significant amount of time analysing security alerts and collaborating with other teams.

  1. 01
    Monitor security dashboards and alerts for suspicious activity.
  2. 02
    Analyse and triage security incidents to determine their severity.
  3. 03
    Collaborate with incident response teams to mitigate threats.
  4. 04
    Document and report findings to management and other stakeholders.
  5. 05
    Stay updated on the latest security threats and best practices.
  6. 06
    Participate in regular team meetings and training sessions.
Salary on the board

£30k – £68k

Based on advertised midpoints across the 36 priced listings posted in the last 12 months. Base salary only.

Salary visibility
43% of listings advertise a salary — up from 0% the year before.
By seniority
£k base
Mid
39
60
10 jobs
Senior
47
80
16 jobs
Skills & tools

What hiring managers ask for

% of 36 listings posted in the last 12 months that mention each skill, extracted from job descriptions.

SIEM
69%
Incident Response
61%
Microsoft Sentinel
42%
Threat Hunting
36%
Splunk
28%
MITRE ATT&CK
28%
TCP/IP
22%
EDR
22%
Vulnerability Management
22%
PowerShell
22%
Firewalls
19%
Microsoft Defender XDR
19%
Career ladder

From Junior to Principal

A typical UK progression for soc analysts. Years are guidance — strong people move faster, and many senior folks sidestep into research, product or management.

  1. Level 1

    Junior SOC Analyst

    0–2 yrs

    Assists in monitoring security events and performs basic triage under supervision.

  2. Level 2

    SOC Analyst

    2–5 yrs

    Takes primary responsibility for incident detection and response, and contributes to the development of security policies.

  3. Level 3

    Senior SOC Analyst

    5–8 yrs

    Leads incident response efforts, mentors junior analysts, and advises on security strategy.

  4. Level 4

    Principal SOC Analyst

    8+ yrs

    Oversees the SOC's operations, drives strategic initiatives, and ensures compliance with regulatory requirements.

Pathway

How to become a SOC Analyst

There's no single route, but most people follow some version of these steps.

  1. 1

    Entry-Level Analyst

    Start with foundational roles, learning the basics of security monitoring and incident response.

  2. 2

    Specialisation

    Develop expertise in specific areas such as threat hunting, malware analysis, or forensic investigation.

  3. 3

    Advanced Incident Response

    Take on more complex incidents and lead response efforts, often working closely with other security teams.

  4. 4

    Leadership Role

    Move into a leadership position, managing a team of analysts and driving the SOC's strategic direction.

  5. 5

    Strategic Advisor

    Advise senior management on security policies and contribute to the organisation's overall security posture.

Live jobs

15 live roles

See all 15 roles →

SOC Analyst

This role involves monitoring and securing IT and OT networks within a critical national infrastructure environment, focusing on threat detection, incident response, and compliance with regulatory standards. The analyst will act as a security subject matter expert, supporting security operations using tools like SIEM, SOAR, EDR, and cloud platforms such as AWS and Microsoft Sentinel. The position offers opportunities to develop expertise in industrial control systems and work within a forward-funded security transformation programme.

TRIA United Kingdom £53,000 – £53,800 pa
Hybrid Permanent Clearance Required

SOC Analyst

Monitor and triage security alerts in a 24/7 Security Operations Centre, investigating suspicious activity and escalating incidents. Conduct log reviews and support incident response using tools like Sentinel, Defender, or Splunk. Operate on a 4 days on / 4 days off shift pattern with mostly remote work and periodic on-site attendance in Doncaster.

VIQU IT Recruitment London, United Kingdom £25,000 – £30,000 pa

SOC Analyst

Investigate and respond to cybersecurity alerts and incidents within a hybrid SOC environment, collaborating with an MSSP. Conduct threat hunting across endpoints, network, identity, and cloud platforms while improving detection through SIEM rule development and security tool optimisation. Focus on enhancing threat visibility and response capabilities across AWS, Azure, and GCP environments.

Reed N19Gu, United Kingdom £50,000 – £60,000 pa

SOC Analyst (Tier 1)

Monitor and triage security alerts using Microsoft Defender and Sentinel in a 24/7 Security Operations Centre. Conduct incident investigation and support response activities within a collaborative team environment. Contribute to improving detection capabilities and SOC processes in a hybrid-working setup with rotating 12-hour shifts.

VIQU IT New Edlington, South Yorkshire, DN12 1DZ, United Kingdom £25,000 – £30,000 pa

SOC Analyst - DV Cleared

This role involves maintaining a unified operational view across cyber, network, infrastructure, and physical security domains within a secure, live operations centre. The SOC Analyst will lead incident coordination, perform real-time alert triage, and ensure effective communication and decision-making during high-pressure situations. It is a hybrid position emphasizing operational leadership while requiring solid technical awareness to manage and escalate incidents across multiple teams.

CBSbutler Holdings Limited trading as CBSbutler Hanslope, Buckinghamshire, United Kingdom £60,000 – £65,000 pa
On-site Permanent Clearance Required

Senior SOC Analyst / Leeds

This role involves end-to-end investigation of security incidents, proactive threat hunting, and detection engineering within a modern Microsoft security environment. The analyst will monitor cloud, endpoint, identity, and network security events using tools like Microsoft Sentinel and Defender XDR. Responsibilities also include vulnerability management, alert tuning, and contributing to cyber defence strategies across a 24/7 shift pattern with remote night shifts.

Interface Recruitment Leeds, West Yorkshire, United Kingdom £58,600 pa
Hybrid Permanent

Senior SOC Analyst / Bristol

This role involves end-to-end investigation and management of security incidents within a modern Microsoft security environment. The analyst will conduct proactive threat hunting, perform detection engineering, and optimise security tooling using platforms like Microsoft Sentinel and Defender XDR. The position supports vulnerability management, compliance, and cyber defence across cloud, endpoint, identity, and network domains.

Interface Recruitment Bristol, Bristol (county), United Kingdom £58,600 pa
Hybrid Permanent

Senior SOC Analyst

This role involves leading complex security incident investigations, designing and tuning detection rules in SIEM/EDR platforms, proactive threat hunting in cloud and CI/CD environments, and building automation through SOAR. The analyst will drive improvements in SOC maturity, collaborate with engineering teams to strengthen security posture, and mentor junior staff, all within a modern cloud-first environment.

Ballantyne Technology Associates Ltd Reading, Berkshire, United Kingdom £75,000 – £90,000 pa
Hybrid Permanent
See all 15 roles →
Hiring locations

Where this role is hiring

The locations with the most live listings for this role today.

London

Location
2 open

Reading

Location
2 open

Leeds

Location
1 open

Bristol

Location
1 open

Milton Keynes

Location
1 open
FAQs

Common questions

  • A degree in a relevant field such as computer science or information security is beneficial. Certifications like CompTIA Security+, CEH, or CISSP can also enhance your credentials.

  • SOC Analysts often work in shifts to provide 24/7 coverage, which can include evenings, weekends, and holidays.

  • Gaining experience, specialising in areas like threat hunting or incident response, and obtaining relevant certifications can help you advance to senior and leadership roles.

  • Salaries can vary based on experience, location, and the size of the organisation. For more detailed salary information, refer to the salary section on this page.

Hiring soc analysts?

Post your role in 90 seconds and reach the specialist audience that already reads this page.

Post a job → See pricing

🍪 Basic, anonymous analytics (aggregate counts only, never shared) are always on. Accept to also enable third-party tools — Google Analytics, Microsoft Clarity, Mixpanel, Leadfeeder — which help us match you with relevant Cyber Security roles. We never sell your data or use it for cross-site advertising. See our Cookie Policy.