L3 SOC Eng

SOC Level 3 Analyst
Hybryd 2 days WHF and 3 day onsite in Aylesbury Tue/Wed/Thu.

I’m working with a growing MSP who are looking for an experienced SOC Level 3 Analyst /Technical Lead to join their growing Security Operations Centre. This is a days only role
This is a senior technical role for someone who enjoys getting hands-on with complex incidents, leading investigations and helping shape SOC capability.
You will be the escalation point for major security incidents, supporting customers through critical events while also driving improvements across detection, threat hunting and security tooling.

The Role

Lead complex incident investigations including ransomware, data breaches and advanced threats
Manage incidents from detection through containment, remediation and recovery
Act as the senior technical escalation point within the SOC
Carry out threat hunting and improve detection capabilities across SIEM and EDR platforms
Support security tooling improvements, automation and SOC processes
Mentor and develop junior analysts
Experience Required

5+ years’ experience within SOC, Incident Response or MSSP environments
Strong background leading major incident investigations
Advanced SIEM and EDR experience (CrowdStrike highly desirable)
Experience with threat hunting, malware analysis and forensic investigations
Strong knowledge of attacker techniques, MITRE ATT&CK and modern cyber threats
Confident communicating technical issues to senior stakeholders
This is a great opportunity for a senior SOC professional who wants to take ownership, influence technical direction and work on some of the most challenging security incidents