SOC Analyst jobs & career guide

SOC Analysts work in a security operations centre, watching for threats and responding when something looks wrong. They triage alerts, investigate incidents and escalate or contain them, using SIEM and EDR tools. Roles are usually tiered — Tier 1 triage, Tier 2 investigation, Tier 3 threat hunting and detection engineering — and we recruit them for UK and US employers.

See 1 live job Common questions
5.0 · 45 Google reviews NHS Framework RM6281 supplier HealthTrust Europe supplier UK & USA Family-run since 2017

What does a SOC Analyst do?

  • Monitoring and triaging security alerts in a SIEM (e.g. Microsoft Sentinel, Splunk)
  • Investigating suspicious activity with EDR and log data
  • Escalating and documenting incidents, and supporting response
  • Tuning detections and reducing false positives
  • Threat intelligence and, at senior level, threat hunting
  • Shift work in some 24/7 SOCs

Where they work

In-house SOCs at larger organisations, managed security service providers (MSSPs), consultancies, financial services and the public sector. Many roles are hybrid; some UK roles need security clearance.

How to become a SOC Analyst

  • IT support, networking or service-desk experience is a common starting point
  • Certifications that help: CompTIA Security+ / CySA+, Blue Team Level 1, Microsoft SC-200
  • Hands-on SIEM/EDR experience counts for more than certificates alone
  • UK government and defence roles may require SC or DV clearance; US roles usually require existing right to work

Live SOC Analyst jobs

All live jobs →
CYBER & TECHNOLOGY USA · $ USD

SOC Analyst

Austin, TX · hybrid
$95,000–$110,000
Permanent · full time
4 weeks agoView role →
FOR EMPLOYERS

Hiring a SOC Analyst?

Cyber CVs are noisy. We interview every candidate about hands-on scope — not just certificates — and handle US searches with US salaries and time zones.

Tell us the roleCyber & Technology recruitment

SOC Analyst — common questions

What are the SOC tiers?

Tier 1 analysts triage alerts, Tier 2 investigate and respond to incidents, and Tier 3 handle threat hunting, detection engineering and the most complex cases.

Do UK SOC roles need security clearance?

Some do — government, defence and critical national infrastructure roles often require SC or DV clearance. Many commercial SOCs do not.

What does a SOC Analyst do?

Monitors, triages and investigates security alerts, escalating and helping contain real incidents.

Which certifications help?

CompTIA Security+ or CySA+, Blue Team Level 1 and Microsoft SC-200 are well regarded — but hands-on experience matters most.

Are SOC roles remote?

Many are hybrid; fully remote roles exist, especially with MSSPs.

Can I apply for US roles from the UK?

Most US employers require existing right to work in the USA — we will tell you straight before anything else.

New roles, straight to your inbox

Tell us what you're after and we'll only send roles that match.