{"id":134677,"url":"https://alion.io/job/capita-level-3-soc-analyst","title":"Level 3 SOC Analyst","company":{"id":11676,"name":"Capita","domain":"capita.com","url":"https://alion.io/company/capita","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":98,"open_postings":24,"ghost_share":0,"stale_share":0.208,"repost_share":0.125,"time_to_fill_p50_days":16,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Belfast, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":41000,"max_usd":92000,"period":"year","method":"role_country_seniority_unknown","sample_n":140},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"IBM QRadar","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false},{"name":"Lighthouse","optional":true},{"name":"LogRhythm","optional":true},{"name":"Microsoft Defender","optional":true}],"status":"live","first_seen_at":"2026-08-27T00:00:00Z","employer_posted_date":"2026-08-27","last_verified_at":"2026-10-17T06:10:51Z","board_verified":true,"closed_at":null,"days_open":51,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":51},"description":"Level 3 SOC AnalystHybrid - with 2 days in our Belfast office - HillView House\nAs an experienced Senior Cyber Security Operations Analyst, you will be responsible for handing security incidents received/escalated from the CSOC Analyst (Tier 1 or Tier 2) and perform a business impact analysis on the security incident.\nYou will leverage a deep understanding of information security technologies, you will aid in triaging threat intelligence from multiple sources and add contextual information to the security incident, perform additional analysis and based on the business impact will recommend the response actions and escalation path.\nYou will be guided by Threat Intelligence which is actionable information (e.g. IOCs/TTPs), conduct threat hunting activities; leveraging and analyzing sources of information as available through the SIEM, in addition identify and investigate potential suspicious activity as well as helping organizations identify, isolate and contain security issues.\nYou will support the initial implementation and management of security related technologies, including (but not limited to) IBM QRadar, Microsoft Sentinel, MDE, MDI and Defender for Cloud.\nSuccessful candidate must hold - SC-200 Certification\nSuccessful candidate must be eligible for SC clearance\nAt Capita, we live by our values: Customer First, Always; Fearless Innovation; Achieve Together; Everyone is Valued. These guide how we work, collaborate, and deliver exceptional results.\nJob title:\nLevel 3 SOC AnalystJob Description:\nWhat You’ll Be Doing:\nOversee completion of day-to-day checklist(s), including log review, management report scheduling & running, alert analysis, and escalation follow up\nRemain current on cyber security trends and intelligence (open source and commercial) in order to guide the security analysis & identification capabilities of the CSOC team\nProvide oversight, guidance and mentoring to L2 & L3 analysts, and fulfil SOC Manager responsibilities in the absence of the SOC Manager\nOversee a number of analysts as part of a virtual team of L1 and L2 analysts, including objectives setting, performance management / reviews, training & development, and BAU activities including shift cover etc. \nPerform advanced event and incident analysis, including baseline establishment and trend analysis.\nSupport on-call arrangements as part of a Rota, to support L1 Analysts working out of hours\nSupport Major Incident Response activity, from a Protective Monitoring perspective, including supporting teams in identification, containment, and remediation of security related threat.\nProvide timely advice and guidance on the response action plans for events and incidents based on incident type and severity.\nIdentify, create and implement improvements to procedures and processes, with the SOC Manager’s approval. \nIdentify opportunities for SOC and client SIEM platform configuration improvements, use case development, monitoring rule creation, tuning & optimization.\nStakeholder and Client Reporting, and engagement\nAssist in architectural design to facilitate the onboarding of new information systems, including the assessment, parsing, onboarding of log sources, and use case and rule development.\nWhat we’re looking for:\nLevel 3 SOC Analyst / Senior Cyber Security and security operations experience\nExperience of onboarding, tuning, reporting and configuring SIEM solutions\nExperience of threat intelligence\nLeadership and mentoring experience and skills\nUnderstanding of low-level concepts including operating systems and networking\nCommercial experience in Penetration Testing and / or Security Monitoring\nUnderstanding of networking and infrastructure design\nKnowledge/experience of one or more System administration (Linux, Windows, Mac)\nSelf-motivated individual with flexible approach to working.\nExcellent interpersonal skills with the ability to explain technical problems to non-technical business stakeholders at all levels.\nStrong written and oral communication skills\nActive or ability to obtain SC clearance\nPreferred Qualifications & Experience:\nIT Certifications, including Network+, Security+\nProtective Monitoring / SOC Certifications, including CySA+\nCyber Security Certifications, including CISMP, CISSP\nExperience with various Microsoft Technologies, including Microsoft Defender for Endpoint, Identity and Cloud\nExperience with SIEM platforms, including IBM QRadar, Microsoft Sentinel and LogRhythm\nIn-depth experience with Microsoft Sentinel, including use case and rule development, workbook / playbook creation, KQL & Logic Apps / SOAR \nExperience in managing Microsoft Sentinel as an MSSP, including Lighthouse, and management and multi-customer environments using DevOps\nHow this aligns to our Values\nCustomer First, Always\nWe prioritise our customers by delivering effective cyber security monitoring, incident response, and expert guidance that protects their services and supports their success. \nFearless Innovation\nWe embrace continuous improvement by identifying new threats, enhancing detection capabilities, and driving innovative security solutions that strengthen our services. \nAchieve Together\nWe collaborate across teams, share knowledge, and support one another to deliver outstanding security outcomes and achieve our collective goals. \nEveryone is Valued\nWe foster an inclusive and supportive environment where every colleague is respected, empowered to develop, and encouraged to contribute their unique perspectives.\nJoin Capita - Where Innovation Meets Opportunity\nCapita is a dynamic leader in consulting and digital services, helping some of the UK’s most recognised organisations transform and thrive. We use cutting-edge technology and fearless innovation to create smarter, more efficient solutions that make a real difference. Our work spans diverse sectors-government, healthcare, education, and finance-offering you the chance to contribute to projects that impact millions of lives. At Capita, you’ll be part of a collaborative, forward-thinking team that values creativity, growth, and inclusion.\nWe’re committed to your development and success, providing opportunities to learn, progress, and shape better outcomes for customers and communities. If you’re ready to make an impact and grow your career, Capita is the place for you. Check out our website www.capita.com\nWhat’s in it for you?\nHybrid - 2 days office location Belfast HillView House \nCompetitive salary \n23 days’ holiday, rising to 27 (pro rata) - plus the option to buy more after qualifying period \nPaid volunteering day with a charity of your choice\nGenerous family leave policies - including 15 weeks’ fully paid maternity, adoption, and shared parental leave\nCycle2Work scheme, pension, life assurance, and more Customer first, always Fearless innovation Achieve together\nEveryone is valued\nWhat we hope you’ll do next:\nChoose ‘Apply now’ to fill out our short application, so that we can find out more about you.\nWe are committed to building a workforce that reflects the diversity of the communities we serve. As part of our strategic goals, we are focused on accelerating gender and ethnic representation in leadership roles. We warmly encourage applications from women and individuals from Black, Asian, and other ethnic minority backgrounds.\nWe’re an equal opportunity and Disability Confident employer, which means we recruit and develop people based on their merit and passion. We’re committed to providing an inclusive, barrier-free recruitment process and working environment for everyone. If you need the job description or application form in an alternative format (such as large print or audio), or if you’d like to discuss other changes or support you might need going forward, please email  and we’ll get back to you. For more information about equal opportunities and process adjustments, please visit the Capita Careers website.\nLocation:\nBelfast,\nUnited KingdomTime Type:\nFull timeContract Type:\nPermanent","description_format":"text","description_chars":8000,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Parental leave"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Digital Government","Information Security","Call Center Services"],"lifecycle":[{"event":"open","at":"2026-08-27T00:00:00Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Skilled Worker, Senior or Specialist Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Skilled Worker; Global Business Mobility: Senior or Specialist Worker","cap_exempt":false,"checked_at":"2026-10-17T06:21:15+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":10,"band":"cold","label":"Long shot","p_open":1,"p_active":0.292,"p_room":0.35,"age_days":51,"expected_fill_days":16,"reasons":["conf:4","win:tail"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/capita-level-3-soc-analyst","json_url":"https://alion.io/job/capita-level-3-soc-analyst.json","meta":{"generated_at":"2026-10-17T13:00:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17395,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":11676},"rest":"https://alion.io/mcp/rest/get_company?id=11676"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcapita-level-3-soc-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcapita-level-3-soc-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcapita-level-3-soc-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/capita-level-3-soc-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcapita-level-3-soc-analyst"}]}