Key Responsibilities

• Investigate and triage alerts for attacker activity and suspicious patterns.
• Use OSINT tools (VirusTotal, Shodan, WHOIS, etc.) to analyse indicators like suspicious IPs or user agents.
• Identify process gaps, friction points, and automation opportunities.
• Refine SOC playbooks and tooling to improve efficiency and accuracy.
• Provide technical feedback to improve detection capabilities.
• Guide and mentor junior analysts, sharing knowledge and best practices.

Key Skills & Knowledge

• Communication: Strong written and verbal skills to explain complex findings clearly.
• Security Architecture: Understanding of attacker behaviours (lateral movement, persistence, recon), networking, and IR workflows.
• Detection Logic: Ability to spot anomalies and malicious activity, and to help design detections that minimise false positives.
• Curiosity & Pattern Recognition: Always digging deeper, asking sharp questions, and recognising when something is “off.”
• Collaboration & Leadership: Comfortable working with global teams, mentoring peers, and driving investigations.
• Technical Toolkit:
  • SIEMs (Splunk, QRadar, Elastic, Sentinel, etc.)
  • Ticketing systems (Zendesk, ServiceNow, etc.)
  • EDR, asset management, vulnerability scanning tools
  • Networking fundamentals (TCP/IP, DNS), OS fluency (Windows/Linux), APIs, HTTP/S

 What We’re Looking For

A proactive analyst who doesn’t just react to alerts but also drives improvements in detection and response, mentors teammates, and contributes to building a stronger SOC function.

Please note only suitable candidates will be contacted.