SOC Analyst - Bristol

Job summary

The Information and Cyber Security team are responsible for identifying and mitigating cyber security risks for the firm and ensure continued compliance against specific regulatory and best practice standards.

We're recruiting for a skilled SOC Analyst to join our growing security operations team with 3+ years of experience.

Responsibilities

• Monitor and triage security alerts using SIEM platforms, applying advanced correlation rules and custom KQL queries to identify suspicious activity.
• Investigate and respond to security incidents, performing root cause analysis, impact assessment, and containment actions across endpoints, networks, and cloud environments.
• Develop and maintain detection rules and use cases, leveraging threat intelligence and MITRE ATT&CK mappings to improve detection fidelity.
• Automate repetitive tasks and enhance detection/response workflows using scripting languages such as Python, PowerShell, Logic app, workflow and KQL.
• Contribute to continuous improvement of SOC processes, including documentation updates, tuning of alert thresholds, and enrichment of log sources.

Qualifications

• Operating, tuning, and configuring SIEM platforms (Sentinel, Defender for Endpoint, Defender for Cloud).
• Experienced in writing and optimising detection queries using KQL.
• Investigating and responding to security incidents across endpoints, networks, and cloud environments.
• Reviewing and analysing firewall logs and configurations.
• Scripting in Python and PowerShell to automate detection and response workflows.

Job description