Senior SOC Analyst

Job Description

Role: Senior SOC Analyst

Location: London

Salary: Competitive salary and package dependent on experience

Career Level: Senior Analyst

Employment Security Clearance: Any offer of employment is subject to satisfactory BPSS and the candidate being granted a level of security clearance which typically requires 10 years continuous UK address history, usually including no periods of 30 consecutive days or more spent outside of the UK, and a declaration of being a British passport holder with no dual nationality at the point of application.

Role Description

The Senior SOC Analyst (L2) provides advanced investigation and analysis, acting as the escalation point for complex or high‑severity incidents. They conduct root cause analysis, guide L1 analysts, and support incident containment and remediation efforts. The role operates within a high-performance compute environment, working shift‑based 24x7 operations and receiving a shift premium for unsociable hours.

Key Responsibilities

• Investigate escalated incidents to determine attack vectors, scope, and potential impact.
• Correlate events across multiple data sources to build a comprehensive incident narrative.
• Execute containment, eradication, and recovery activities in coordination with IT/OT stakeholders.
• Lead response for medium to high‑severity incidents and document detailed investigation reports.
• Conduct tuning of detection rules and thresholds in collaboration with the Security Content Engineer.
• Support continuous improvement by identifying gaps in detection coverage and playbooks.
• Mentor and provide technical guidance to L1 Analysts.
• Participate in periodic SOC exercises and simulated incident response drills.
• Be part of a 24/7 SOC team and work in scheduled shifts.

Role Requirements

• Education: Bachelor’s degree in Cybersecurity, Computer Science, or related field.
• Experience: 3–5 years in SOC, Incident Response, or Threat Analysis roles.
• Certifications (preferred): GCIA, GCIH, CompTIA CySA+, Microsoft SC‑200, or Splunk Certified Power User.

Essential Skills and Experience: Strong analytical mindset, in-depth knowledge of SIEM/EDR tools, malware behavior, and incident handling methodologies.

Closing Date for Applications: 01/06/2026

Accenture reserves the right to close the role prior to this date should a suitable applicant be found.