Security Operations Center Analyst

About this role

Senior SOC Analyst – Microsoft Security

Bristol

Hybrid

£65,000 - Permanent

We’re working with a Microsoft-focused technology consultancy seeking an experienced Senior SOC Analyst to join its security operations team.

You’ll work primarily within Microsoft’s Unified Security Operations Platform, including Microsoft Defender XDR and Microsoft Sentinel, helping manage incidents, support junior analysts and strengthen security operations for a range of clients.

Key responsibilities

• Monitor priority incidents and ensure SLAs are met
• Act as the first escalation point for SOC Analysts
• Investigate and respond to security incidents when required
• Escalate complex incidents with clear, detailed findings
• Support incident response, client communications and incident bridges
• Maintain runbooks, internal documentation and the KQL library
• Tune detections and manage improvement requests through Azure DevOps

What we’re looking for

• Strong experience in a security operations or analytical role
• Hands-on expertise with Microsoft Defender and Microsoft Sentinel
• Advanced KQL skills and a strong understanding of Log Analytics
• Broad knowledge of the Microsoft security stack
• Strong written and verbal communication skills, including confidence communicating with clients during high-priority incidents

Desirable experience

• Python, Bicep, ARM templates or JSON
• Microsoft or security certifications such as SC-300, SC-900, AZ-900, Security+, Network+ or A+
• Previous experience mentoring junior analysts

The organisation is committed to creating an inclusive workplace and welcomes applications from candidates of all backgrounds.

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.