Security Analyst II (SOC)

Location: Hybrid in Welwyn Garden City, United Kingdom; 60% of the week is spent collaborating at office locations or local sites and the remainder remotely.

Company

Tesco operates as a supermarket, technology company, and mobile network, supporting customers, colleagues, and communities.

What you will do

• Monitor and analyse security events using SIEM/XDR platforms and advanced queries to identify and validate threats.
• Investigate, contain, remediate, and document security incidents, including active response and root-cause analysis.
• Conduct proactive threat hunting and track emerging attacker techniques, vulnerabilities, and threat trends.
• Improve SOC playbooks, processes, automation use cases, and overall SOC maturity.
• Collaborate with Incident Managers, Threat Intelligence, and other teams, producing reports for technical and non-technical audiences.

Requirements

• 2+ years of experience in SOC operations or an equivalent security monitoring role.
• Strong investigative and analytical skills, including the ability to handle complex incidents under pressure.
• Proficiency with SIEM/XDR platforms and advanced querying, including KQL or SPL.
• Solid understanding of Windows and Linux operating systems, TCP/IP and DNS networking concepts, and security fundamentals.
• Familiarity with incident response frameworks such as NIST and MITRE ATT&CK.
• Ability to prioritise and manage multiple cases concurrently in high-stakes environments.
• Strong communication skills for technical and non-technical stakeholders.
• Experience with scripting languages such as Python or PowerShell.

Culture & Benefits

• Permanent, full-time employment with 36 working hours per week.
• Annual bonus scheme of up to 20% of base salary.
• 25 days of holiday plus a personal day and Bank holidays.
• Private medical insurance and a free 24/7 virtual GP service.
• Family leave, including maternity, adoption, and paternity leave, plus an Employee Assistance Programme and mental wellbeing support.
• Inclusive and accessible recruitment process with flexible-working discussions available.

Hiring process

• Applications should be submitted by 05-Nov-2026.
• Application support is available for candidates requiring an accessible recruitment process.