Senior SOC Analyst

About the role

We are seeking a technically strong Senior SOC Analyst to join our Security Operations Centre. The role is hands‑on L3 level, responsible for complex alert investigations, incident response, proactive threat hunting and continuous improvement of detection capabilities across multiple customer environments.

Key responsibilities

• Perform in‑depth triage, investigation and analysis of security alerts across multiple customer SIEM environments.
• Act as the L3 escalation point for complex or high‑severity incidents escalated by L1/L2 analysts.
• Lead incident response activities including containment, eradication, recovery and post‑incident review.
• Conduct proactive threat hunting using MITRE ATT&CK, threat intelligence and customer‑specific risk profiles.
• Develop and tune SIEM detection rules, correlation logic and alert thresholds.
• Create and maintain SOC runbooks and incident response playbooks.
• Produce high‑quality incident reports for technical and business audiences.
• Integrate and operationalise threat intelligence, including IOCs, TTPs and threat actor profiles.
• Investigate activity across EDR, network, identity, cloud and application log sources.
• Mentor and guide L1 and L2 analysts through technical coaching and case reviews.

Required profile

• 3‑6 years of experience in a Security Operations Centre or similar security operations role.
• Strong analytical and problem‑solving abilities with a focus on incident investigation.
• Experience working in a fast‑paced, multi‑customer MSSP environment.
• Proven ability to lead incident response and mentor junior analysts.
• Excellent written communication skills for producing clear incident reports.

Required skills

• SIEM platforms and rule development
• MITRE ATT&CK framework
• Threat intelligence integration (IOCs, TTPs)
• Endpoint Detection and Response (EDR)
• Network security monitoring
• Cloud security monitoring
• Application log analysis
• Incident response and threat hunting