Security Operations Centre Analyst

Responsibilities

• Monitor, triage and investigate security alerts across our internal estate and customer-operated solutions — covering cloud, identity, endpoint, network, application and AI workloads.
• Drive incidents end-to-end: scoping, containment, eradication, recovery and post-incident review, working to clearly defined SLAs and rules of engagement.
• Produce high-quality incident write-ups and lessons‑learned for both technical and executive audiences, and feed findings back into detections, runbooks and engineering backlogs.
• Act as an escalation point for first‑line alerts and partner with on‑call engineering when an incident crosses into platform reliability or customer impact.
• Develop and execute hypothesis‑driven threat hunts across cloud telemetry, identity signals, endpoint data and application logs — looking for what alerts won’t catch.
• Map adversary behaviour to frameworks such as MITRE ATT&CK, and turn ...