SOC Analyst Level 3 (Cybersecurity)

Location: Onsite in Farnborough, United Kingdom; full UK driving licence required. Candidates must have the right to work in the UK and meet applicable UK Government and contractual security and residency requirements.

Requirements

• Experience in Security Operations Centre environments at Level 3 or Level 2 with readiness to progress.
• Experience with cyber threat detection, incident response, threat hunting, cyber threat intelligence, and threat actor TTPs.
• Knowledge of networking fundamentals, Windows and Linux operating systems, IOCs, IOAs, and OSINT methodologies.
• Experience with Elastic Stack or other SIEM technologies, including detection content engineering.
• Ability to communicate technical findings to technical and non-technical audiences and mentor less experienced analysts.
• Eligibility to meet UK Government and contractual personnel security requirements, including applicable residency and right-to-work requirements.

Nice to have

• CompTIA Security+, SecurityX, CISSP, CISM, or similar certification.
• Experience in highly secure or government environments.
• Advanced SIEM engineering and detection content experience.

What you will do

• Lead complex security investigations and coordinate incident response activities.
• Drive proactive threat hunting across customer environments and develop methods to detect anomalous behaviour.
• Produce actionable cyber threat intelligence and present findings and recommendations to stakeholders.
• Engineer and enhance detection content using Elastic Stack and related technologies.
• Act as the technical escalation point, support customer workgroups, and contribute to cyber security forums.
• Support, mentor, and develop SOC team members while participating in an on-call rota and occasional customer travel.

Culture & Benefits

• Exposure to advanced cyber security threats and technologies in highly secure environments.
• Structured career progression, ongoing training, mentoring, and certification support.
• Collaborative environment focused on knowledge sharing and influencing security strategy.
• In-person collaboration with flexibility intended to support wellbeing, productivity, and individual work styles.