Senior SOC Analyst – London/Hybrid/ – Up To £50K Pro Rata (DOE)/ 3-6 Months FTC

We are excited to partner with a financial client based in central London that prides itself in delivering complex projects in fast-paced moving organisations. They are looking to onboard an ambitious and goal-oriented Senior SOC Analyst to join their growing security team.

The person will be accountable for delivery of SOC and SIEM to existing and helping to sell capabilities to potential customers.

KEY RESPONSIBILITIES:

• Manage coach and lead the SOC 1st line analyst teams.
  
  
• Quickly assess incidents for their impact and severity.
  
  
• Establish procedures, containing threats, and mitigating potential damage.
  
  
• Ensuring that evidence is collected in a proper organised manner.
  
  
• Implement the latest detection capabilities to Microsoft Sentinel.
  
  
• Prepare and maintain detailed incident reports and provide post-incident analysis to improve security measures.
  
  
• Work closely with the team members, such as service desk or projects team, to address security issues and implement solutions.
  
  
• Proactively search for signs of advanced threats and vulnerabilities within the network.
  
  SKILL REQUIREMENTS:
  
  
• Strong understanding of cybersecurity principles, including knowledge of common threats and vulnerabilities.
  
  
• Capabilities which include Kubernetes, AWS, GCP, Windows Endpoints, Carbon Black and Elastic SIEM, and an understanding on Powershell.
  
  
• Advanced understanding of cybersecurity principles, attack vectors, threat actors, and the threat landscape. Strong knowledge on the CIA triad.
  
  
• Skilled in triaging alerts, performing root cause analysis, and implementing remediation actions.
  
  
• Deep understanding of network protocols (e.g., TCP/IP, DNS, HTTP/HTTPS, SMTP) and their role in cybersecurity.
  
  
• Familiarity with network devices (e.g., routers, switches, firewalls) and concepts like VPNs and VLANs.
  
  
• Ownership of EDR (Endpoint Detection and Response) solutions, such as MS Defender for Endpoint, CrowdStrike, Carbon Black, or SentinelOne. Knowledge of IDS/IPS is a plus.
  
  
• Experience in managing incidents from identification through containment, eradication, recovery, and lessons learned.
  
  Familiarity with cybersecurity frameworks and regulations, such as:
  
  
• NIST Cybersecurity Framework (CSF).
  
  
• ISO/IEC 27001.
  
  
• GDPR, HIPAA, PCI DSS, or other compliance standards.
  
  PREFERRED CERTIFICATIONS:
  
  
• Microsoft Azure Sentinel 200.
  
  
• Microsoft Azure Sentinel 400 to be obtained