Senior SOC Analyst

<p class="text-muted mb-3">Senior SOC Analyst – Cloud Security / Detection Engineering</p>

<p class="text-muted mb-3">Location: Hybrid - Remote with the requirement to attend team meetings in the Reading office once a month</p>

<p class="text-muted mb-3">Type: Permanent | Full-time</p>

<p class="text-muted mb-3">Sector: Software / SaaS</p>

<p class="text-muted mb-3">Salary: £75,000 - £90,000 + 5% annual bonus</p>

<p class="text-muted mb-3">Ballantyne Technology is working exclusively on a senior-level Security Operations opportunity with an international, industry leading software business operating in a modern cloud environment.</p>

<p class="text-muted mb-3">This is not a traditional SOC role focused on alert handling. The position sits at the senior technical level and combines incident leadership, detection engineering, threat hunting and automation. You’ll have genuine ownership of security operations maturity rather than working in a ticket-driven environment.</p>

<p class="text-muted mb-3">The role</p>

<p class="text-muted mb-3">You’ll act as a senior technical point of escalation within the SOC, leading complex investigations and driving continuous improvement across tooling, detection capability and response processes.</p>

<p class="text-muted mb-3">Typical responsibilities include:</p>

<ul class="list-unstyled job-desc-list mb-3">

</ul>

<p class="text-muted mb-3">Leading complex security incidents end-to-end including investigation, containment, forensics and root cause analysis.</p>

<ul class="list-unstyled job-desc-list mb-3">

</ul>

<p class="text-muted mb-3">Designing, tuning and improving detection across SIEM and EDR platforms.</p>

<ul class="list-unstyled job-desc-list mb-3">

</ul>

<p class="text-muted mb-3">Proactive threat hunting across cloud infrastructure, applications, and CI/CD environments.</p>

<ul class="list-unstyled job-desc-list mb-3">

</ul>

<p class="text-muted mb-3">Building and maintaining automation and response playbooks using SOAR tooling.</p>

<ul class="list-unstyled job-desc-list mb-3">

</ul>

<p class="text-muted mb-3">Working closely with DevOps, infrastructure and engineering teams to improve security posture and response capability.</p>

<ul class="list-unstyled job-desc-list mb-3">

</ul>

<p class="text-muted mb-3">Reducing alert fatigue, improving logging coverage and strengthening SOC maturity.</p>

<ul class="list-unstyled job-desc-list mb-3">

<li class="d-flex align-items-start mb-2"><i class="mdi mdi-circle-medium text-success fs-15 me-2 mt-1"></i><span>Ensure security operations and incident response practices are aligned with industry-recognised frameworks such as ISO 27001.</span></li>

</ul>

<p class="text-muted mb-3">Supporting audit readiness, documentation and operational standards.</p>

<ul class="list-unstyled job-desc-list mb-3">

</ul>

<p class="text-muted mb-3">Mentoring and supporting junior analysts where required.</p>

<p class="text-muted mb-3">What I’m looking for</p>

<ul class="list-unstyled job-desc-list mb-3">

</ul>

<p class="text-muted mb-3">Strong experience in senior SOC / blue team / security operations roles.</p>

<ul class="list-unstyled job-desc-list mb-3">

</ul>

<p class="text-muted mb-3">Hands-on SIEM engineering and detection tuning experience.</p>

<ul class="list-unstyled job-desc-list mb-3">

</ul>

<p class="text-muted mb-3">Proven ownership of complex incident response and investigations.</p>

<ul class="list-unstyled job-desc-list mb-3">

</ul>

<p class="text-muted mb-3">Cloud security experience across Azure and AWS.</p>

<ul class="list-unstyled job-desc-list mb-3">

</ul>

<p class="text-muted mb-3">Experience automating SOC workflows and response processes.</p>

<ul class="list-unstyled job-desc-list mb-3">

</ul>

<p class="text-muted mb-3">Threat hunting experience beyond basic log review.</p>

<ul class="list-unstyled job-desc-list mb-3">

</ul>

<p class="text-muted mb-3">Comfortable engaging directly with technical stakeholders.</p>

<ul class="list-unstyled job-desc-list mb-3">

</ul>

<p class="text-muted mb-3">Able to prioritise and operate effectively under pressure.</p>

<p class="text-muted mb-3">Useful but not essential</p>

<ul class="list-unstyled job-desc-list mb-3">

</ul>

<p class="text-muted mb-3">Microsoft Sentinel experience.</p>

<ul class="list-unstyled job-desc-list mb-3">

</ul>

<p class="text-muted mb-3">Container or Kubernetes environments.</p>

<ul class="list-unstyled job-desc-list mb-3">

</ul>

<p class="text-muted mb-3">CI/CD security tooling exposure.</p>

<ul class="list-unstyled job-desc-list mb-3">

</ul>

<p class="text-muted mb-3">Red or purple team experience.</p>

<p class="text-muted mb-3">Why this opportunity</p>

<ul class="list-unstyled job-desc-list mb-3">

</ul>

<p class="text-muted mb-3">Senior ownership and autonomy.</p>

<ul class="list-unstyled job-desc-list mb-3">

</ul>

<p class="text-muted mb-3">Modern cloud-first environment.</p>

<ul class="list-unstyled job-desc-list mb-3">

</ul>

<p class="text-muted mb-3">Strong investment in tooling and automation.</p>

<ul class="list-unstyled job-desc-list mb-3">

</ul>

<p class="text-muted mb-3">Opportunity to genuinely influence how security operations operate.</p>

<ul class="list-unstyled job-desc-list mb-3">

</ul>

<p class="text-muted mb-3">Hybrid working model.</p>

<p class="text-muted mb-3">This is a fantastic opportunity to join an innovative company with a clear mission to revolutionise the Engineering and Construction industry through digitalisation.</p>

<p class="text-muted mb-3">You will be part of a passionate and creative team that values your contributions and supports your professional development.</p>

<p class="text-muted mb-3">Apply Now</p>

<p class="text-muted mb-3">If you are ready to take on this challenging and rewarding role, we would love to hear from you. Apply today to join our team and help us build a safer, healthier, and more sustainable future.</p>

<p class="text-muted mb-3">Want to know more? For an informal chat around this role and your next career move call/email Jamie Smith at Ballantyne Technology or click the apply button below</p>