Senior SOC Analyst at Phoenix

Setup: Remote
Location: Pocklington, England
Type: Full-time
Level: Senior
Posted: Jun 8, 2026

Description

Phoenix, a leading UK IT solutions and managed service provider specializing in the public sector, is seeking a Senior SOC Analyst. This role involves leading complex incident response cases, guiding clients through high-severity security events, and strengthening overall SOC capability. The analyst will focus on incident response, threat hunting, malware analysis, reporting, SOC leadership, and providing 24x7 on-call support.

Required Skills

DFIR
SOC operations
incident response
KQL analytics
SIEM/EDR detections
MITRE ATT&CK
malware triage
reverse-engineering tools
investigation reports
timelines
intelligence summaries
SOC playbooks
on-board new customers
SOC processes
tooling
Advanced SIEM expertise
Microsoft Sentinel & Defender XDR
High-level KQL capability
Python/PowerShell for automation
Core digital forensics skills
Velociraptor, KAPE & sandbox tools
Solid detection engineering understanding
Strong technical reporting and documentation skills

Additional Information

Required Previous Experiences: strong background in DFIR, SOC operations, or incident response
Ability to lead complex investigations and high‑severity security incidents
Confident decision‑maker who can guide clients through critical situations
Strong communicator, able to translate technical findings for any audience
Collaborative mindset with willingness to work closely across teams
Ability to mentor junior analysts and support skill development
Comfortable working in fast‑paced, high‑pressure environments
Proactive approach to improving SOC processes, playbooks, and detection capabilities