Covenant HR
Security Operations Center Analyst
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Company
Our client supports the security operations of a global social media organization operating a large-scale, cloud-centric technology environment. The organization manages complex infrastructure spanning cloud platforms, Linux systems, containers/microservices, and macOS endpoints, with a strong focus on responding to rapidly evolving and AI-driven cyber threats.
Job Title - Senior SOC Analyst - (2 Openings)
Location - Onsite in Barbican, London, UK
Role Type - Contract through March 2027, with an ASAP start
Schedule:
- 1 analyst: Sunday–Wednesday, 06:00–16:00 UK time
- 1 analyst: Wednesday–Saturday, 06:00–16:00 UK time
Must Have Skills:
- 5+ years of direct, high-severity incident response experience, including independently triaging, investigating, managing, and remediating complex security incidents and active breaches
- Senior, hands-on SOC/Incident Response experience with the ability to hit the ground running, manage operational caseload, and actively work and resolve tickets
- Strong operational SOC background focused primarily on day-to-day threat detection, triage, investigation, and incident response
- Strong hands-on experience across at least 2 of the following: macOS endpoints, Linux/cloud environments, and microservices/containers, with deep Linux/Unix command-line and cloud/container forensics skills
- Practical AI/automation experience, including AI-driven or agentic security tooling and building scripts/workflows that improve SOC triage and response; Splunk experience strongly relevant
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Responsibilities and Job Details:
Get help with your application
Your very own career expert that helps elevate your application to the next level.
- Provide hands-on operational SOC and Incident Response support, taking ownership of active tickets and helping absorb a high-volume security caseload
- Triage, investigate, manage, and remediate high-severity security incidents across a complex global technology environment
- Operate independently during ambiguous, high-pressure incidents and complex active breaches without requiring prescriptive direction
- Develop and tune alerts to identify anomalous and malicious activity across the environment
- Conduct comprehensive investigations and root-cause analysis while helping drive attack eviction, remediation, recovery, and post-incident improvements
- Perform investigations across Linux/cloud infrastructure, macOS endpoints, containers, and microservices, including Docker, Kubernetes, and container runtime logs
- Use Splunk and emerging AI-driven security tooling, including 7AI, to support detection, investigation, triage, and response
- Build automation workflows and scripts that improve SOC efficiency and accelerate security triage and incident response
- Collaborate cross-functionally with Threat Hunting, Cyber Threat Intelligence, Digital Forensics, Legal, Infrastructure, and other teams
- Lead deep, complex investigations involving disparate data sources and stakeholders across multiple regions
- Work approximately four 10-hour onsite shifts per week, with openings for Sunday–Wednesday or Wednesday–Saturday, 06:00–16:00 UK time; candidates should specify which shift they can support
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location