Senior SOC Analyst x 2 - £615 per day - Inside IR35 - Remote - contract until end of March 2026 - Candidates with active SC clearance or those with a recently lapsed clearance will be prioritised.

Our client, one of the UKs largest producers of zero carbon energy, is looking for 2 Senior SOC Analysts to join their Security Operations Centre. This is an excellent opportunity for an experienced SOC professional to step into a senior role, leading on complex investigations and incident response within a high-profile environment. The Role -The Senior SOC Analyst will act as the technical expert within the SOC, responsible for handling escalations from Tier 1 and Tier 2 analysts and managing the most complex security incidents. You will lead deep-dive investigations, improve detection and response processes, and play a key role in stakeholder engagement. Key responsibilities include:

• Analysing advanced security incidents, determining root cause and attack paths.
• Leading incident response activities across SIEM, EDR/XDR, networks, and cloud platforms.
• Producing clear, business-focused incident reports and updates for senior stakeholders.
• Advising on SOC tooling and ensuring effective integration of incident response requirements.
• Supporting security exercises, crisis response, and compliance alignment with industry frameworks.

Candidate Profile -The successful candidate will bring:

• Significant experience in SOC operations and cyber incident response.
• Strong knowledge of adversary TTPs and frameworks such as MITRE ATT&CK.
• Hands-on skills in log analysis, anomaly detection, and incident remediation.
• Experience working in traditional IT and cloud (Azure and/or AWS) environments.
• Strong communication skills with the ability to translate technical threats into business terms.

Tools & Technologies - You will work with a modern SOC technology stack, including:

• SIEM: Microsoft Sentinel
• EDR/XDR: Microsoft Defender for Endpoint
• Threat Intel: Recorded Future
• Network Analysis: Wireshark / tcpdump
• SOAR & Automation: Palo Alto Cortex XSOAR, ServiceNow SecOps
• Vulnerability Management: Tenable Nessus / Tenable.io
• Other nice to have tools: Shodan, Censys, BloodHound, Metasploit, Cobalt Strike, MITRE ATT&CK Navigator
• Cloud Security (advantageous): AWS GuardDuty, Security Hub, CloudTrail, Detective, Macie, Config, Inspector, VPC Flow Logs

Security clearance -

Due to the nature of this role, Security Check (SC) clearance is required. Candidates with active SC clearance or those with a recently lapsed clearance will be prioritised during the shortlisting process.