{"id":3580297,"url":"https://alion.io/job/inchcape-l3-soc-analyst-2","title":"L3 SOC Analyst","company":{"id":448301,"name":"Inchcape","domain":"inchcape.com","url":"https://alion.io/company/inchcape-3","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":{"grade":"A","score":100,"open_postings":11,"ghost_share":0,"stale_share":0.091,"repost_share":0,"time_to_fill_p50_days":16,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":64000,"max_usd":146000,"period":"year","method":"role_country_seniority_unknown","sample_n":159},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-30T00:00:00Z","employer_posted_date":"2026-10-30","last_verified_at":"2026-11-06T05:32:42Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"Location: London (Hybrid)\nDo you want to help protect a global organisation from evolving cyber threats while shaping the future of cyber security operations? At Inchcape, we're pursuing an exciting strategy to transform our global business and accelerate our industry towards a low-carbon, sustainable future.\nThis role is part of Inchcape's Global Cyber Security team, supporting our worldwide operations through advanced security monitoring, threat detection and incident response capabilities. You'll play a critical role in protecting our people, systems and data, working alongside highly skilled security professionals in a collaborative and fast-paced environment.\nAs Senior Security Analyst, you'll operate in an L3 Security Operations Centre (SOC) capacity, serving as the senior technical escalation point for complex cyber security incidents and advanced threat investigations. You'll drive continuous improvement across detection engineering, threat hunting, automation and incident response capabilities, helping strengthen Inchcape's cyber resilience and security maturity.\nThis is a unique opportunity to combine deep technical expertise with strategic influence, working across global teams to enhance security operations, implement innovative solutions and defend against emerging threats.\nWhat You'll Do\nAct as the senior technical escalation point for high-severity and complex cyber security incidents, providing expert analysis and guidance throughout investigations.\nLead the technical response to major incidents, coordinating containment, eradication and recovery activities with internal and external stakeholders.\nDesign, develop and optimise detection rules, threat models and advanced monitoring capabilities across SIEM, EDR and cloud security platforms.\nConduct proactive threat hunting activities using threat intelligence, behavioural analytics and industry frameworks to identify previously undetected threats.\nDevelop and enhance security automation and SOAR playbooks to improve operational efficiency, response capability and analytical effectiveness.\nMentor and support SOC analysts while contributing to the ongoing maturity of detection engineering, incident response and security operations practices.\nAbout You\nTo be successful in this role, you'll bring extensive cyber security operations experience, strong technical expertise and a passion for continuous improvement in a global security environment. You'll demonstrate:\nSignificant experience operating in a senior SOC environment, including working in an L3 analyst, incident response, threat hunting or detection engineering capacity.\nDeep technical knowledge of SIEM, EDR, SOAR, cloud security, identity security, endpoint security and enterprise monitoring platforms.\nProven experience leading the investigation and response to complex cyber security incidents and acting as a senior technical decision-maker.\nStrong detection engineering and threat hunting capabilities, including experience with frameworks such as MITRE ATT&CK.\nExperience developing security automation, orchestration workflows and process improvements that enhance SOC effectiveness.\nExcellent communication, stakeholder management and mentoring skills, with the ability to explain complex technical concepts to both technical and non-technical audiences.\nStart your journey\nWe’re committed to developing internal talent, therefore if you’re excited about this role but don’t meet every requirement, we still encourage you to apply. You might be the perfect fit.We also encourage you to have a conversation with your current line manager before applying as part of our ongoing commitment to open career conversations.\nOpportunity for everyone\nAt Inchcape, inclusion accelerates our success. We are committed to creating a workplace where everyone feels valued, heard, and empowered to thrive. We foster an inclusive culture that reflects the communities we serve, ensuring opportunities for all. Click here to learn more about our commitment to Inclusion and Diversity.\nAbout us\nInchcape is the leading global automotive distributor operating in markets. We partner with some of the biggest brands in the business to sustainably power better mobility today and in the future.\nOur diverse global team of over 16,000 talented colleagues foster an inclusive and collaborative culture, delivering a brilliant experience for our customers and partners. We’re a dynamic and fast-growing business, driving the transformation of our industry and redefining tomorrow. Find out more visit www.inchcape.com \nAdditional information request\nSelected candidates will be contacted to initiate our hiring journey. We may request additional information from applicants to better understand your background, qualifications and experience for the role.","description_format":"text","description_chars":4805,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Wholesale","Car Dealerships"],"lifecycle":[{"event":"open","at":"2026-11-01T01:45:57Z"}],"visa":[],"liveness":{"score":78,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.868,"p_room":0.9,"age_days":7,"expected_fill_days":16,"reasons":["conf:0","velocity","win:mid","comp:brand"],"computed_at":"2026-11-06T05:58:05Z"},"pay":null,"html_url":"https://alion.io/job/inchcape-l3-soc-analyst-2","json_url":"https://alion.io/job/inchcape-l3-soc-analyst-2.json","meta":{"generated_at":"2026-11-06T14:18:38Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":26498,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":448301},"rest":"https://alion.io/mcp/rest/get_company?id=448301"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Finchcape-l3-soc-analyst-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Finchcape-l3-soc-analyst-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Finchcape-l3-soc-analyst-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/inchcape-l3-soc-analyst-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Finchcape-l3-soc-analyst-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3580297}},{"tool":"search_jobs","arguments":{"company":"inchcape.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3580297},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}