Lead SOC Analyst; L3

Overview

We are seeking an experienced Lead Cyber Operations Analyst to play a key role in strengthening enterprise cyber containment capabilities and supporting the evolution of a mature Cyber Operations function.

This senior position offers the opportunity to coordinate complex organisation-wide cyber activities, guide critical testing initiatives, and help defend against an evolving threat landscape. You’ll work within a fast-paced, collaborative security environment and participate in on-call support as part of a highly skilled cyber operations team.

This opportunity is ideal for someone who thrives under pressure, enjoys solving complex cyber security challenges, and wants to make a real impact within a large-scale enterprise environment.

• Lead and coordinate cyber operations and incident response activities across the organisation.
• Support the enhancement of cyber containment and response capabilities.
• Manage and respond to complex cyber security incidents in time-critical situations.
• Conduct investigation, analysis, containment, and remediation activities for security incidents.
• Drive timely escalation and ensure incidents are managed through to successful resolution.
• Support cyber testing exercises and continuous operational improvements.
• Analyse network traffic, PCAP captures, endpoint activity, and attack patterns to identify malicious behaviour.
• Work with SIEM technologies and security tooling across large and complex enterprise environments.
• Produce technical reports and provide briefings to senior stakeholders and executives.
• Support cyber risk management, governance, and security control initiatives.

To be successful in this role, you should have:

• Strong hands-on experience in Cyber Security Incident Response or Cyber Operations.
• Deep technical expertise in one or more incident response related domains, including:
  • SOC Operations
  • Malware Analysis
  • Endpoint Detection & Response
  • Network Security
• Proven ability to operate calmly and decisively in high-pressure, time-critical situations.
• Strong knowledge of cyber security toolsets and detection technologies.
• Experience with scripting languages and strong proficiency in data analysis.
• Strong understanding of cyber risk, controls, and security governance.
• Proficiency with SIEM technologies within large and complex computing environments.
• Incident response expertise including:
  • PCAP Capture
  • Network Analysis
  • Traffic Pattern Analysis
• Excellent interpersonal and stakeholder management skills.
• Experience briefing, debriefing, and presenting to senior executives.
• Excellent written and verbal communication skills.
• Familiarity with Financial Services regulations and compliance requirements.
• Experience working within highly regulated enterprise environments.

Candidates may be assessed across several key capabilities relevant to success in the role, including:

• Change & Transformation
• Business Acumen
• Strategic Thinking
• Technical Cyber Security Skills

This is an opportunity to join a highly capable cyber security team working at the forefront of cyber defence within a complex enterprise environment. You’ll have the chance to work on high-impact security incidents, influence operational improvements, and collaborate with experienced cyber professionals on critical security initiatives.