Security Operations Center Analyst

Location: Sheffield (2 days onsite per week)

Duration: Initial contract through March 2027

A large enterprise organisation is looking for an experienced SOC Analyst contractor to join their Cyber Defence team on an immediate basis. This is a hands‑on operational SOC role supporting incident analysis, phishing investigations, and cyber defence operations within a complex enterprise technology environment.

The successful contractor will work closely with internal security teams and external technology partners to support day-to-day security operations and incident management.

• Investigate and triage security alerts and incidents
• Support phishing analysis and incident response activities
• Work within SIEM/XDR tooling to identify threats and suspicious activity
• Develop and tune detection logic/use cases where required
• Engage with stakeholders across Security Operations and wider technology teams
• Support shift-based SOC operations and participate in on‑call rotation

• 3+ years’ experience within a SOC / Cyber Defence environment
• Strong experience with at least 2 of the following:
  Chronicle SOAR, Microsoft Sentinel, Crowd Strike XDR, Service Now
• Strong understanding of SIEM technologies and detection logic
• Experience handling phishing investigations and security incidents
• Comfortable operating within a fast‑paced enterprise environment
• Strong communication and stakeholder engagement skills

• Previous experience within an MSSP environment
• Experience operating in large multi‑supplier environments