Level 3 SOC Analyst

Belfast, Northern Ireland (Hybrid - 2 days onsite) SC-200 Certification Required Must be eligible for UK SC Clearance

We're looking for an experienced Level 3 SOC Analyst / Senior Cyber Security Operations Analyst to join a growing Cyber Security Operations team supporting critical client environments.

This is an excellent opportunity for a security professional with strong experience in incident response, threat hunting, threat intelligence, and SIEM technologies to play a key role in protecting complex enterprise environments.

Key Responsibilities

• Investigate and manage security incidents escalated from Tier 1 & Tier 2 analysts
• Conduct business impact assessments and recommend appropriate response actions
• Perform advanced threat analysis, threat hunting, and incident investigations
• Analyse and enrich threat intelligence from multiple sources
• Support major incident response activities including containment and remediation
• Develop and improve SIEM use cases, detection rules, monitoring content, and SOC processes
• Mentor junior analysts and provide technical guidance across the SOC function
• Assist with onboarding new log sources and developing detection capabilities
• Produce stakeholder reports and provide security recommendations

Technical Environment

You'll work with technologies including:

• Microsoft Sentinel
• Microsoft Defender for Identity (MDI)
• IBM QRadar
• LogRhythm
• KQL
• Logic Apps
• SOAR Technologies

Qualifications

• Level 3 SOC Analyst or Senior Security Operations experience
• SC-200 Certification (Mandatory)
• Experience with Microsoft Sentinel
• Threat Hunting and Threat Intelligence experience
• Incident Response and Security Monitoring experience
• SIEM onboarding, tuning, configuration, and reporting
• Strong understanding of networking and operating systems
• Experience with Windows and/or Linux administration
• Ability to communicate effectively with technical and non-technical stakeholders
• Eligible for UK SC Clearance
• KQL, Workbook, Playbook and Detection Rule development
• Sentinel Lighthouse and multi-tenant environments
• DevOps and SOC automation experience

#CyberSecurity #SOCAnalyst #MicrosoftSentinel #ThreatHunting #IncidentResponse #SC200 #CyberJobs #BelfastJobs #InformationSecurity #BlueTeam #Hiring #SecurityOperations #QRadar #Defender #UKJobs