Senior Security Analyst SOC

We’re looking for an experienced Senior Security Analyst with a strong Threat Detection and Threat Hunting background to join a large National Security Operations Centre.

This is an opportunity for someone who enjoys getting beyond the day-to-day alert queue and taking a more proactive view of security. You’ll have the time and space to look across the wider threat ecosystem, understand emerging threats, techniques and attack patterns, and translate that intelligence into practical improvements to the SOC’s detection capability.

You’ll research emerging threats and indicators of compromise, conduct proactive threat hunts, identify gaps in existing monitoring and develop or improve detection logic. You’ll work extensively across Microsoft Sentinel and Defender, including complex KQL queries, while helping strengthen automation, analytics and security operations across a highly complex hybrid environment.

This is a senior role, so technical capability is only part of the picture. You’ll also act as an escalation point for significant incidents, share knowledge across the wider SOC and mentor less experienced analysts. The team is looking for someone who can lead from the front, challenge existing approaches and continually look for better ways to detect and respond to threats.

What you’ll bring
You’ll ideally have:

• Strong experience across Security Operations, Threat Detection and Threat Hunting
• Deep practical experience with Microsoft Sentinel and Defender
• Strong KQL capability and experience improving detection logic
• Knowledge of threat actors, TTPs, indicators of compromise and emerging attack techniques
• Experience investigating and responding to major cyber security incidents
• Understanding of MITRE ATT&CK and Cyber Kill Chain
• Experience working across complex cloud, SaaS and on-premise environments
• The ability to mentor analysts and contribute to the ongoing uplift of a SOC
• Strong communication skills and the ability to work across technical and non-technical stakeholders

Experience within healthcare or another large, highly regulated environment would be highly advantageous.

This role would particularly suit someone who enjoys asking “what aren’t we detecting yet?” rather than simply responding to what the existing tools are already telling them.

Interested? Apply via the link below, or reach out directly to Jaymin Southee at H2R Technology for a confidential discussion: [email protected]