Realtime Recruitment
L3 SOC Analyst
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Role Description
I am looking for an experienced L3 SOC Analyst / Senior Cyber Security Analyst to join a security operations environment, providing advanced security monitoring, incident response, SIEM engineering, and technical leadership across a SOC team.
Key Requirements
- Strong L3 SOC / Security Operations experience within a commercial environment.
- Proven experience with SIEM onboarding, configuration, tuning, optimization, and use-case development.
- Strong Security Monitoring, Incident Response, and Threat Intelligence experience.
- Experience performing advanced event and incident analysis, including baseline and trend analysis.
- Commercial experience in Penetration Testing and/or Security Monitoring.
- Experience providing technical leadership, mentoring, and guidance to L2/L3 SOC analysts.
- Strong understanding of networking, infrastructure, operating systems, and security architecture.
- Experience across Windows, Linux, and/or Mac system administration.
- Experience supporting Major Incident Response, including threat identification, containment, and remediation.
- Ability to communicate complex security issues effectively to technical and non-technical stakeholders.
- Active SC Clearance or ability to obtain SC Clearance.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Key Technical Skills
- SIEM: Microsoft Sentinel, IBM QRadar, LogRhythm
- Microsoft Security: Microsoft Defender for Endpoint, Microsoft Defender for Identity and Cloud
- Microsoft Sentinel: KQL, use-case development, detection rules, workbooks, playbooks
- SOAR: Logic Apps and security automation
- MSSP / Multi-Tenant: Microsoft Sentinel Lighthouse, multi-customer environments, and DevOps
- Threat Intelligence: Open-source and commercial intelligence
- Security Monitoring: Alert analysis, detection engineering, rule creation, tuning, and optimization
- Incident Response: Advanced investigation, containment, remediation, and Major Incident Response
- Infrastructure: Networking, operating systems, and infrastructure design
- Log Management: Log-source assessment, parsing, onboarding, and monitoring
- Automation: SOAR, playbook development, and process improvement
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Certifications
Relevant industry certifications are highly desirable, including:
- CompTIA Network+
- CompTIA Security+
- CompTIA CySA+
- CISMP
- CISSP
- Other relevant SOC, SIEM, Cyber Security, or Protective Monitoring certifications
Must hold UK, EU, or Irish passport – Must be in Belfast – this is a hybrid role, 2 days per week
Please contact shane.doolin@realtime.jobs with your CV or direct message to chat.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London