Senior SOC Analyst (Incident Response, Microsoft Security)

Senior SOC Analyst (Incident Response, Microsoft Security)

London (Hybrid – 2 days onsite every 2 weeks)

6-month contract, Inside IR35

About the Role

We’re looking for a hands‑on Senior SOC Analyst to join a mature Cyber Fusion function, focused on detection and response across a Microsoft 365 environment.

This is a true operational security role—you’ll be actively investigating incidents, handling alerts, and improving detection capabilities. You’ll also play a key part in strengthening processes, tooling, and overall response effectiveness.

What You’ll Be Doing

• Investigating and responding to security incidents end-to-end (triage → containment → recovery)
• Performing deep‑dive technical analysis to understand root cause and scope
• Handling phishing investigations and user‑driven security cases
• Working with SIEM and SOAR platforms to support investigations and response workflows
• Improving detection rules, alert quality, and triage processes
• Supporting reductions in MTTI / MTTR through effective analysis and tooling
• Contributing to post‑incident reviews, documentation, and playbooks
• Collaborating with the wider Blue Team and Cyber Fusion Centre

What We’re Looking For

• Strong experience in a SOC, SecOps, or Incident Response role (ideally Tier 2/3 level)
• Proven ability to investigate and resolve security incidents in enterprise environments
• Hands‑on experience with SIEM platforms (e.g. Microsoft Sentinel, Splunk, QRadar)
• Experience working with SOAR tools or automated response workflows
• Solid understanding of attack techniques and frameworks (e.g. MITRE ATT&CK)
• Strong technical knowledge across endpoint, identity, email, and cloud security
• Experience with Microsoft Defender and Microsoft 365 security tooling
• Ability to work effectively during active incidents and time-sensitive situations
• Clear communication skills, both technical and non-technical

Nice to Have

• Experience in detection engineering or tuning alert logic
• Certifications such as GCIH, CySA+, SC-200, BTL1/BTL2
• Exposure to Google Cloud security operations

Working Setup

• Hybrid model: 2 days onsite every two weeks (London)
• Embedded within a Cyber Security / Cyber Fusion team
• Collaborative, hands‑on environment with a focus on continuous improvement

If you’re a Senior SOC Analyst who enjoys real investigation work and improving how security operations run, this is a strong opportunity to make an impact.

#LI-DNI

#J-18808-Ljbffr…