{"id":3478117,"url":"https://alion.io/job/forward-role-senior-security-operations-analyst","title":"Senior Security Operations Analyst","company":{"id":2641128,"name":"Forward Role","domain":"forwardrole.com","url":"https://alion.io/company/forwardrole","size_band":"1001-5000","is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"Schema","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Leeds, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":55000,"max":65000,"currency":"GBP","period":"year","gross":null,"usd_annual":86961},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Google SecOps","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-29T11:51:08Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-11-02T14:25:08Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"An established, award-winning UK fintech is growing its Information Security team and is looking for a Senior Security Operations Analyst.\nSenior Security Operations Analyst (SOC / SIEM / Threat Hunting)\n£55,000 - £65,000 + Bonus + excellent benefits\nManchester or Leeds (Hybrid)\nAbout the role\nYou'll protect key business assets by monitoring, detecting, analysing and responding to security incidents, owning threat detection and incident response at real scale.\nWhat you'll be doing\nSIEM ownership: Oversee the day-to-day running of the SIEM, working closely with Infrastructure, Networks, DevOps and an outsourced SOC.\nDetection rules: Define and fine-tune SIEM rules, and investigate alerts and incidents through to completion.\nIncident response: Gather and analyse data, then contain and respond to cyber security incidents as part of a dynamic monitoring and response capability.\nThreat intelligence and hunting: Gather threat intelligence from multiple sources, coordinate threat hunting, spot trends and attacks, and plan mitigation and remediation.\nEscalation and remediation: Raise problems, escalate through the right channels and track them through to resolution.\nEDR: Manage Endpoint Detection and Response day to day.\nPolicy and control design: Help design, manage and document security policies, standards and processes, and design effective test methods for logical security controls.\nStaying current: Keep up with the latest threats, best practice and technology developments.\nWhat you'll bring\nHands-on SIEM experience with Chronicle / Google SecOps, Splunk or Microsoft Sentinel, and a good working knowledge of event log data.\nSolid understanding of firewalls, IDS/IPS and Windows Security Event Logs.\nKnowledge of cloud infrastructure fundamentals alongside traditional technologies.\nAbility to quickly understand existing infrastructure, network security principles, data flows and security architectures.\nA proactive approach to identifying control weaknesses and vulnerabilities.\nStrong written and verbal communication, able to explain complex technical risk in plain business terms.\nA sense of ownership, with the confidence to spot what needs doing while working well in a team.\nApply now to arrange a confidential conversation about the role and client in more detail.\nAs an industry leading, nationwide Marketing, Digital, Analytics, IT and Design recruitment agency, we are continually receiving new assignments to work on, so keep a close eye on our website, Facebook, LinkedIn and Twitter pages for a full list of current permanent and interim opportunities as well as marketplace news and fun stuff.\nForward Role is operating as an employment agency.","description_format":"text","description_chars":2684,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response"],"lifecycle":[{"event":"open","at":"2026-10-29T19:27:07Z"}],"visa":[],"liveness":{"score":54,"band":"ok","label":"Likely open","p_open":1,"p_active":0.542,"p_room":1,"age_days":3,"expected_fill_days":29,"reasons":["conf:8","agency","velocity","win:early"],"computed_at":"2026-11-02T06:13:15Z"},"pay":{"stated_usd_annual":86961,"is_top_pay":false},"html_url":"https://alion.io/job/forward-role-senior-security-operations-analyst","json_url":"https://alion.io/job/forward-role-senior-security-operations-analyst.json","meta":{"generated_at":"2026-11-02T18:55:53Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":26384,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2641128},"rest":"https://alion.io/mcp/rest/get_company?id=2641128"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fforward-role-senior-security-operations-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fforward-role-senior-security-operations-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fforward-role-senior-security-operations-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/forward-role-senior-security-operations-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fforward-role-senior-security-operations-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3478117}},{"tool":"search_jobs","arguments":{"company":"forwardrole.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3478117},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}