Position title
Principal SOC Analyst
Description

Principal SOC Analyst

Remote – UK Based

£70,000 per annum plus benefits

*Candidates must be UK Based due to Security Vetting required

 

FlexIT Talent Solutions  have partnered with one of the UK’s leading MSSP’s as they work to further grow their Security Operations Centre. As a skilled Principal SOC Analyst, you will play a key role in the detection, investigation, and response to advanced cyber threats within our customers Security Operations Centre and bring your deep technical expertise, strong investigative instincts, and the ability to mentor others while driving the maturity of the SOC’s threat detection and response capabilities.

Responsibilities

Key Role:

  • Lead complex incident investigations from triage to remediation and post-incident review.
  • Guide and mentor junior analysts, providing technical leadership during incidents
  • Work with the analyst team to ensure proactive threat hunting
  • Analyse and validate security alerts
  • Correlate signals from multiple platforms (e.g., EDR, network, cloud, identity) to identify adversary techniques (MITRE ATT&CK).
  • Leverage threat intelligence (including MISP) to enrich investigations and build contextual awareness.
  • Contribute to detection use case development, helping to identify gaps in coverage and recommend improvements.
  • Collaborate with other teams to support vulnerability management, purple teaming, and security awareness activities.
  • Participate in the on-call rotation for high-priority escalations
Qualifications

Core experience:

  • More than 4 years  working in a SOC or cyber defence team, with demonstrable experience leading high-impact investigations.
  • Strong working knowledge of:
  • SIEM: Elastic Stack (Kibana, Logstash), Microsoft Sentinel
  • EDR: Microsoft Defender for Endpoint, CrowdStrike Falcon, Elastic Defend
  • Threat Intel: MISP (querying, correlation, pivoting)
  • SOAR: Jira automations, Azure logic apps and logic functions
  • Security Frameworks: MITRE ATT&CK, NIST, Cyber Kill Chain

 

  • Proficiency in interpreting logs from systems, endpoints, cloud services (e.g., Azure, M365), and network sources.
  • Experience using threat intelligence to contextualise alerts and enhance response decisions.
  • Experience in developing and utilising hypothesis, analysis and iteration to drive results from threat hunting across the pyramid of pain.
  • Familiarity with threat hunting methodologies and anomaly detection approaches.
  • Ability to script or automate repetitive tasks (Python, PowerShell, or similar).
  • Strong written and verbal communication skills for clear reporting and incident documentation.

Desirable Skills

  • Exposure to ITSM platforms like Jira (for incident workflows and automation).
  • Experience with SOAR tools or Sentinel playbooks.
  • Participation in red/purple team exercises or incident simulation.
  • Security certifications (e.g., GCIA, GCFA, GCIH, SC-200, etc).
Employment Type
Full-time
Job Location
United Kingdom
Remote work from: United Kingdom
Base Salary
£70000-£70000
Date posted
July 28, 2025
PDF Export
Export as PDF