L2 SOC Analyst
First seen by Alion on Nov 13, 2026.
An international organisation is looking for an experienced L2 SOC Analyst to join their security team and play a key role in protecting the company's systems, data, and people.
This is a hands-on role for someone who enjoys threat hunting, incident investigation, security automation, and continuous improvement. You'll work with a range of security technologies, help strengthen the company's security controls, and support the development of a proactive and effective SOC capability.
What You'll Do
Perform proactive threat hunting, monitoring, investigation, and incident response.
Investigate security alerts and incidents, conduct root cause analysis, and drive remediation.
Develop and maintain incident response playbooks and SOC procedures.
Automate repetitive SOC tasks, alerts, and reporting using scripting and security tooling.
Monitor and improve our security technologies, including SIEM, EDR, endpoint, cloud, and DLP solutions.
Identify vulnerabilities and security risks and recommend effective mitigation strategies.
Support security audits, reporting, risk assessments, and compliance requirements.
Research emerging threats, vulnerabilities, and attack techniques.
Evaluate and test new security products and technologies.
Help improve SOC processes, controls, and overall security maturity.
Mentor and support junior analysts.
Participate in an out-of-hours on-call rota when required.
What You'll Bring
3+ years' experience in a SOC environment and 5+ years in cybersecurity.
Strong experience with SIEM, EDR, vulnerability management, threat hunting, and incident response.
Good knowledge of the Microsoft Security stack, including Defender, Intune, Azure, and Entra ID.
Experience with Microsoft Sentinel / Azure Sentinel is highly desirable.
Scripting experience with PowerShell, Python, and/or Regex.
Understanding of security frameworks such as ISO 27001, NIST, CIS, or PCI DSS.
Experience with endpoint protection, cloud security, DLP, CASB, and managed security services.
Strong analytical, investigative, and problem-solving skills.
Excellent communication skills, with the confidence to present security findings to senior and C-level stakeholders.
A proactive mindset and genuine passion for cybersecurity and continuous learning.
Microsoft Sentinel – A cloud-native Security Information and Event Management (SIEM) and Security Orchestration, Automation and Response (SOAR) solution (Essential).
KQL (Kusto Query Language) – Used to query large datasets across Azure and Microsoft security tools (Essential).
Microsoft Defender for Endpoint (MDE) – An enterprise endpoint security platform (Desirable).
Desirable Certifications
Microsoft SC-200, SC-300, SC-400, AZ-500 or AZ-900.
CompTIA Security+ or Network+.
BTL1.
Mimecast or other relevant security/vendor certifications.
Why Join Our Client?
This is an opportunity to take a key role with this international client, working with modern cybersecurity technologies, hunting real-world threats, and making a tangible impact on the company's security posture. Apply now! Send CV's to [email protected]