Part of the Future Tech Jobs (opens in a new tab) network
Sign in

SOC Analyst Jobs

The eyes and ears of an organisation's cyber defences. SOC Analysts monitor, detect, and respond to security incidents in real-time.

Open roles
11
Salary range
£30k – £68k
Hiring companies
9
View 11 live roles → Get an alert

SOC Analysts are the front-line defenders in the world of cyber security. Working in Security Operations Centres (SOCs), they monitor and analyse security events to identify and respond to potential threats. These roles are critical for organisations of all sizes, from scaleups to large enterprises, ensuring that security incidents are detected and mitigated quickly. SOC Analysts often work in shifts, providing 24/7 coverage to maintain a constant watch over the organisation's digital assets.

What the role does

Inside the role of an SOC Analyst

A typical week for a SOC Analyst is a mix of monitoring, incident response, and reporting. They spend a significant amount of time analysing security alerts and collaborating with other teams.

  1. 01
    Monitor security dashboards and alerts for suspicious activity.
  2. 02
    Analyse and triage security incidents to determine their severity.
  3. 03
    Collaborate with incident response teams to mitigate threats.
  4. 04
    Document and report findings to management and other stakeholders.
  5. 05
    Stay updated on the latest security threats and best practices.
  6. 06
    Participate in regular team meetings and training sessions.
Salary on the board

£30k – £68k

Based on advertised midpoints across the 45 UK listings priced in pounds in the last 12 months. Base salary only.

Salary visibility
47% of listings advertise a salary — up from 0% the year before.
By seniority
£k base
Junior
28
38
6 jobs
Mid
40
60
11 jobs
Senior
47
90
17 jobs
Skills & tools

What hiring managers ask for

% of 36 listings posted in the last 12 months that mention each skill, extracted from job descriptions.

SIEM
69%
Incident Response
61%
Microsoft Sentinel
42%
Threat Hunting
36%
Splunk
28%
MITRE ATT&CK
28%
TCP/IP
22%
EDR
22%
Vulnerability Management
22%
PowerShell
22%
Firewalls
19%
Microsoft Defender XDR
19%
Career ladder

From Junior to Principal

A typical UK progression for soc analysts. Years are guidance — strong people move faster, and many senior folks sidestep into research, product or management.

  1. Level 1

    Junior SOC Analyst

    0–2 yrs

    Assists in monitoring security events and performs basic triage under supervision.

  2. Level 2

    SOC Analyst

    2–5 yrs

    Takes primary responsibility for incident detection and response, and contributes to the development of security policies.

  3. Level 3

    Senior SOC Analyst

    5–8 yrs

    Leads incident response efforts, mentors junior analysts, and advises on security strategy.

  4. Level 4

    Principal SOC Analyst

    8+ yrs

    Oversees the SOC's operations, drives strategic initiatives, and ensures compliance with regulatory requirements.

Pathway

How to become a SOC Analyst

There's no single route, but most people follow some version of these steps.

  1. 1

    Entry-Level Analyst

    Start with foundational roles, learning the basics of security monitoring and incident response.

  2. 2

    Specialisation

    Develop expertise in specific areas such as threat hunting, malware analysis, or forensic investigation.

  3. 3

    Advanced Incident Response

    Take on more complex incidents and lead response efforts, often working closely with other security teams.

  4. 4

    Leadership Role

    Move into a leadership position, managing a team of analysts and driving the SOC's strategic direction.

  5. 5

    Strategic Advisor

    Advise senior management on security policies and contribute to the organisation's overall security posture.

Live jobs

11 live roles

See all 11 roles →

SOC Analyst

The role involves working in a 24/7 shift pattern, monitoring and responding to cyber-attacks using advanced detection tools like Microsoft Security Stack, Splunk, EDR, IDS, and IPS. You will join a team of accredited security experts, providing support for millions of log events and thousands of network devices.

NCC Group Manchester Hardman Boulevard, United Kingdom
Remote Permanent

SOC Analyst – Step into Shift Leadership

SOC Analyst – Step into Shift LeadershipLeeds | £38,500 + 20% Shift Allowance (£46,200) | 4 on / 4 off,Are you an experienced SOC Analyst looking for that next step, but not quite ready for a full Team Lead role?I'm...

Fynity Leeds, West Yorkshire, United Kingdom £38,000 pa

SOC Analyst - Active SC required

Monitor and respond to security incidents using IBM QRadar SIEM, conducting threat detection, log analysis, and incident investigation across enterprise systems. Support a defence/aerospace client with robust security controls and detailed post-incident reporting. Engage in proactive threat hunting and handle diverse cyber threats including phishing and malware.

Matchtech Harlow, Essex, United Kingdom
Hybrid Contract Clearance Required

Lead SOC Analyst - DV Cleared

The Lead SOC Analyst will lead the operational delivery of security monitoring, supervise Senior SOC Analysts, and provide technical leadership during live cyber security events. Responsibilities include complex investigations, shift handovers, and continuous process improvement.

Network IT Milton Keynes, Buckinghamshire, United Kingdom £80 ph

Senior SOC Analyst

The Senior SOC Analyst will lead the Security Monitoring function, ensuring high-quality security monitoring, investigation, and escalation. Responsibilities include monitoring the technology estate, investigating security alerts, and supporting incident response activities. The role involves working 12-hour shifts in a 24/7 environment and contributing to the continuous improvement of monitoring capabilities.

Network IT Milton Keynes, Buckinghamshire, United Kingdom £75 ph

Senior SOC Analyst

This role involves leading complex security incident investigations, designing and tuning detection rules in SIEM/EDR platforms, proactive threat hunting in cloud and CI/CD environments, and building automation through SOAR. The analyst will drive improvements in SOC maturity, collaborate with engineering teams to strengthen security posture, and mentor junior staff, all within a modern cloud-first environment.

Ballantyne Technology Associates Ltd Reading, Berkshire, United Kingdom £75,000 – £90,000 pa
Hybrid Permanent

Associate SOC Analyst

The Associate SOC Analyst works in a 4-on-4-off shift pattern, actively monitoring and responding to security incidents in the SOC. They collaborate with senior analysts to identify and mitigate threats, continuously learning and applying foundational technical skills to safeguard critical systems and data.

NCC Group Manchester Hardman Boulevard, United Kingdom
Remote

Cyber Security SOC Analyst

As a Cyber Security SOC Analyst, you will monitor systems, respond to alerts, and manage incident reporting. You will work closely with the Escalations Management Team to mitigate threats and provide operational support to the wider Cyber Security Team.

Gold Group London, United Kingdom £30,000 – £36,000 pa
Hybrid Permanent Clearance Required
See all 11 roles →
Hiring locations

Where this role is hiring

The locations with the most live listings for this role today.

London

Location
2 open

Manchester

Location
2 open

Reading

Location
2 open

Leeds

Location
1 open
FAQs

Common questions

  • A degree in a relevant field such as computer science or information security is beneficial. Certifications like CompTIA Security+, CEH, or CISSP can also enhance your credentials.

  • SOC Analysts often work in shifts to provide 24/7 coverage, which can include evenings, weekends, and holidays.

  • Gaining experience, specialising in areas like threat hunting or incident response, and obtaining relevant certifications can help you advance to senior and leadership roles.

  • Salaries can vary based on experience, location, and the size of the organisation. For more detailed salary information, refer to the salary section on this page.

Hiring soc analysts?

Post your role in 90 seconds and reach the specialist audience that already reads this page.

Post a job → See pricing

🍪 Basic, anonymous analytics (aggregate counts only, never shared) are always on. Accept to also enable third-party tools — Google Analytics, Microsoft Clarity, Mixpanel, Leadfeeder — which help us match you with relevant Cyber Security roles. We never sell your data or use it for cross-site advertising. See our Cookie Policy.