{"id":3334442,"url":"https://alion.io/job/experis-uk-soc-analyst","title":"SOC Analyst","company":{"id":53987,"name":"Experis UK","domain":"experis.co.uk","url":"https://alion.io/company/experis","size_band":"1001-5000","is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Winchester, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":41000,"max":50000,"currency":"GBP","period":"year","gross":null,"usd_annual":66784},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"SIEM","optional":false},{"name":"IBM QRadar","optional":true},{"name":"LogRhythm","optional":true},{"name":"Microsoft Sentinel","optional":true}],"status":"live","first_seen_at":"2026-10-27T12:38:54Z","employer_posted_date":null,"last_verified_at":"2026-10-27T12:38:54Z","board_verified":false,"closed_at":null,"days_open":7,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":7},"description":"Technical Consultant - Threat Detection, Response & Intelligence\nLocation: Hursley - On-site\nSecurity clearance: UK national with a minimum of 5 years' UK residency required\nCertification: Microsoft Certified: Security Operations Analyst Associate\nWe are seeking a technically strong and proactive Technical Consultant - Threat Detection, Response & Intelligence to join our security operations capability. You will play a key role in monitoring, investigating and responding to cyber threats, helping protect critical systems and improving the organisation's overall security posture.\nThis is an excellent opportunity for an experienced SOC or security operations professional who combines hands-on technical expertise with strong analytical thinking, clear communication and a genuine interest in threat management. The SC-200 certification validates expertise in investigating, mitigating and responding to threats using Microsoft security technologies, including Sentinel and Defender tooling.\nWhat you'll do\nMonitor, triage and investigate security alerts and events across SIEM and wider security tooling.\nIdentify suspicious activity, indicators of compromise and potential security incidents.\nConduct initial incident investigations, assess severity and impact, and escalate appropriately with clear supporting evidence.\nSupport the full incident response lifecycle, including containment, remediation and post-incident learning.\nUse threat intelligence to strengthen detection, investigation and response activities.\nContribute to threat monitoring, reporting and trend analysis.\nTune detection rules and analytics to reduce false positives and improve detection quality.\nSupport continual service improvement across security monitoring and response processes.\nWork collaboratively with security, infrastructure and wider technology teams, while also managing independent workstreams effectively.\nWhat we're looking for\nEssential\nUK national with a minimum of 5 years' UK residency.\nMicrosoft Certified: Security Operations Analyst Associate (SC-200) - mandatory.\nPractical experience with SIEM technologies and security tooling.\nSolid understanding of IT infrastructure and networking.\nUnderstanding of vulnerability and threat management.\nKnowledge of the incident response lifecycle.\nStrong team-working skills alongside the ability to work independently.\nAdaptable and resilient in a fast-paced, changing workload.\nGenuine interest in cyber security, threat detection and threat management.\nDesirable\nProtective Monitoring or SOC experience.\nHands-on experience with SIEM platforms such as QRadar, Microsoft Sentinel or LogRhythm Security Analytics.\nExperience in incident investigation, triage and escalation.\nThreat monitoring and response experience.\nTrend reporting and security analytics.\nDetection rule tuning and continual service improvement.\nIf you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website","description_format":"text","description_chars":2970,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Security Operations"],"lifecycle":[{"event":"open","at":"2026-10-27T13:10:52Z"}],"visa":[],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.596,"p_room":1,"age_days":6,"expected_fill_days":30,"reasons":["seen:6","agency","urgency","velocity","win:early"],"computed_at":"2026-11-03T05:54:40Z"},"pay":{"stated_usd_annual":66784,"is_top_pay":false},"html_url":"https://alion.io/job/experis-uk-soc-analyst","json_url":"https://alion.io/job/experis-uk-soc-analyst.json","meta":{"generated_at":"2026-11-04T02:40:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4086,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":53987},"rest":"https://alion.io/mcp/rest/get_company?id=53987"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fexperis-uk-soc-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fexperis-uk-soc-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fexperis-uk-soc-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/experis-uk-soc-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fexperis-uk-soc-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3334442}},{"tool":"search_jobs","arguments":{"company":"experis.co.uk","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3334442},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}