We are seeking an experienced Level 3 Senior Analyst – Security Operations Centre (SOC) to lead advanced security monitoring, threat hunting, incident investigation, and response activities. The ideal candidate will have strong expertise in SIEM, EDR, Cyber Threat Intelligence (CTI), malware analysis, and security incident management, preferably within a major banking, large corporate, or Managed Security Services Provider (MSSP) environment.

The role will be responsible for investigating complex security incidents, validating security alerts, improving detection capabilities, and guiding junior SOC analysts while ensuring the effectiveness of security operations.

Key Responsibilities

• Analyse IDS alerts, network traffic, system logs, and endpoint activities to identify and investigate potential security threats.
• Validate, investigate, and prioritise security alerts and incidents generated through SIEM, EDR, and Cyber Threat Intelligence (CTI) platforms.
• Conduct proactive threat hunting using advanced Endpoint Detection and Response (EDR) tools and techniques.
• Lead complex security incident investigations, including host triage, malware analysis, remote system analysis, and root cause identification.
• Coordinate incident response activities, oversee remediation, and ensure incidents are tracked through resolution.
• Evaluate and provide feedback on SIEM, CTI, and EDR service providers to improve alert accuracy, reduce false positives, and enhance detection and escalation capabilities.
• Prepare detailed security incident reports, investigation findings, and management-level notifications.
• Collaborate with security engineering teams to optimise, tune, and configure security monitoring technologies and devices.
• Assess existing SOC capabilities, evaluate emerging security technologies, and recommend improvements to strengthen security operations.
• Review SOC procedures, operational protocols, and incident response processes to identify improvement opportunities.
• Mentor and guide junior SOC analysts on advanced threat detection, investigation, and incident response techniques.
• Maintain awareness of emerging cyber threats, vulnerabilities, attack techniques, and industry security best practices.

Required Qualifications & Experience

• Bachelor's degree in Computer Science, Computer Engineering, Information Technology, or a related discipline.
• Minimum 6 years of relevant experience in a Level 3 SOC Analyst or equivalent senior security operations role.
• Experience working within a major banking institution, large corporate environment, or Managed Security Services Provider (MSSP).
• Mandatory professional certification: CISSP, CISM, or CISA.
• SIEM certifications and relevant vendor-specific security certifications are an added advantage.

Technical Skills & Expertise

• Strong understanding of security architectures, network security devices, and enterprise security infrastructure.
• Hands-on experience with SIEM, EDR, IDS/IPS, and Cyber Threat Intelligence (CTI) platforms.
• Expertise in advanced threat hunting, security event analysis, and incident investigation.
• Strong knowledge of malware analysis, infection vectors, root cause identification, and mitigation techniques.
• In-depth understanding of threat intelligence, vulnerability management, and emerging cyberattack methodologies.
• Experience in incident response, endpoint forensics, host triage, and security remediation.
• Ability to assess security tools, improve detection rules, and enhance SOC operational effectiveness.