RemoteLeaf Logo
Log in Sign up

L3 SOC Analyst

5 hours, 55 minutes ago
United Kingdom
Full-time
Senior
Security Analyst
DevOps and Infrastructure
AWS Bash CrowdStrike Cybersecurity Go Kubernetes PowerShell Python Splunk
Apply Now
Saviynt

Saviynt

Saviynt is the leading cloud identity governance platform providing access governance and intelligence solutions for critical applications on Cloud and Enterprise, ensuring operational efficiency, risk reduction, and simplified identity management.

Internet Software & Services
501-1000
Founded 2010
$170M raised
View All Jobs 22

Description

  • Serve as the final technical escalation point for complex security incidents from L1/L2 analysts.
  • Lead high-severity incident investigations across AWS, Kubernetes, endpoints, networks, and hybrid environments.
  • Perform forensic analysis to determine incident root cause, impact, and remediation actions.
  • Correlate SIEM, EDR, CSPM, and cloud-native telemetry to identify sophisticated attack chains.
  • Design and maintain SOAR response playbooks and automation scripts for enrichment, evidence collection, and containment.
  • Integrate security platforms through APIs to streamline detection and response workflows.
  • Conduct proactive, intelligence-driven threat hunting across enterprise and cloud environments.
  • Develop and tune SIEM detections, correlation rules, and EDR queries aligned with MITRE ATT&CK and threat intelligence.
  • Mentor L1/L2 analysts and maintain SOC SOPs, runbooks, and response playbooks.
  • Analyse incident trends and operational metrics to improve detection coverage, automation, and security posture.

Requirements

  • Bachelor’s degree in Computer Science, Cybersecurity, or a related discipline, or equivalent industry experience.
  • Extensive Security Operations experience, including work as a senior analyst, threat hunter, or L3 analyst.
  • Strong hands-on AWS cloud security monitoring and incident-response experience; AWS experience is essential.
  • Experience investigating security events affecting Kubernetes and hybrid environments.
  • Proven scripting and automation skills using Python, Go, PowerShell, Bash, or similar languages.
  • Experience with SOAR platforms, such as CrowdStrike Fusion SOAR, and SIEM technologies including CrowdStrike Falcon, Splunk, QRadar, or Microsoft Sentinel.
  • Deep knowledge of EDR tools, host and network forensics, and detection engineering.
  • Strong working knowledge of the MITRE ATT&CK framework for threat detection and hunting.
  • UK residency for at least five years immediately before application, with British citizenship and right to work in the UK.
  • Ability to obtain and maintain SC-level National Security Vetting clearance and complete BPSS checks.

Benefits

  • Full-time, permanent position in the United Kingdom.
  • Opportunities for professional growth and learning through challenging security work.
  • Welcoming, positive work environment.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

iSeatz

Incident Response Program Lead

iSeatz 51-200 Consumer Services

iSeatz is hiring a remote Incident Response Program Lead to build and run its security incident response program and govern MSSP operations for its travel and loyalty commerce platform.

United States Full-time Lead Security Analyst
$146k-$155k
AWS Cloudflare Network Security SIEM
8 hours, 40 minutes ago
Skaylink

Security Analyst Tier 2 (m/f/d)

Skaylink 201-500 IT Services

Join Skaylink, part of Vodafone, as a SOC Analyst to investigate security incidents, strengthen threat detection, and protect customer environments in a modern SOC.

Romania Full-time Mid Level Security Analyst
Cybersecurity PowerShell Python SIEM
14 hours, 55 minutes ago
Bounteous

Senior DevOps Engineer

Bounteous 1001-5000 Internet Software & Services

Bounteous is seeking a contract Senior DevOps Engineer in Canada or Mexico to independently own and improve secure, reliable cloud infrastructure, application delivery, and operational processes for enterprise AI-driven products and platforms.

Mexico Canada Contract Senior DevOps Engineer
Ansible API Gateway AWS Azure Bash CI/CD Cybersecurity Datadog DevSecOps DNS Docker ELK Stack GCP Git GitHub Actions GitLab CI Grafana Helm Jenkins Kubernetes Linux Load Balancing Microservices PowerShell Prometheus Python Secrets Management Splunk Terraform
5 hours, 40 minutes ago
Bounteous

Senior DevOps Engineer

Bounteous 1001-5000 Internet Software & Services

Bounteous seeks a contract Senior DevOps Engineer in Mexico or Canada to independently own and improve secure, reliable cloud infrastructure, deployment, and operational processes for enterprise applications.

Mexico Canada Contract Senior DevOps Engineer
Ansible API Gateway AWS Azure Bash CI/CD Datadog DevSecOps DNS Docker ELK Stack GCP Git GitHub Actions GitLab CI Grafana Helm Jenkins Kubernetes Linux Load Balancing Microservices PowerShell Prometheus Python Secrets Management Splunk Terraform
5 hours, 40 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers