Level 3 SOC Analyst

About the role

The L3 SOC Analyst is the senior technical escalation point within the Security Operations Centre (SOC). This role is responsible for leading complex cyber investigations, directing incident response activities, providing threat intelligence expertise, mentoring L1/L2 analysts, and driving continuous improvement of detection and response capabilities.

What you'll do

• Act as the primary technical escalation point for high-severity and complex cyber incidents
• Lead investigations involving ransomware, business email compromise, insider threats, cloud compromise, identity attacks, and advanced persistent threats
• Perform detailed scoping, root-cause analysis, containment, eradication, and recovery activities during active incidents
• Provide incident command support and coordinate response activities across Cybersecurity, IT, Legal, HR, Privacy, and business stakeholders
• Conduct proactive threat hunting using intelligence, behavioural analytics, SIEM, EDR, NDR, identity, and cloud telemetry

What you need

• 5–9 years in cybersecurity
• Incident response
• SIEM
• EDR
• Cloud security
• Root cause analysis
• Compliance
• Any graduate

Good to have

• CISSP
• CEH
• Python
• LLMs
• PowerShell