L3 SOC Analyst at Saviynt

Saviynt

Remote UK·4h ago

Mid LevelFull-timePythonReactAWSGCPAzureKubernetesGoAI

Salary Range

$38,250 - $51,750 /year

Estimated

This salary is estimated based on similar roles. The actual salary may vary.

About the Role

We are establishing a modern Security Operations Centre focused on proactive, intelligence-driven security outcomes. Our SOC emphasizes AI, automation, detection engineering, and deep cloud security visibility to identify and neutralize sophisticated threats at scale.

Key Responsibilities

→Act as the final escalation point for complex incidents originating from L1/L2 analysis
→Lead investigations into high-severity security events across AWS, Azure, Kubernetes, and hybrid environments
→Perform advanced forensic analysis across endpoints, cloud workloads, and network telemetry
→Correlate telemetry from SIEM, EDR, CSPM, and cloud-native sources to identify attack chains
→Design, develop, and maintain automated response playbooks within the SOAR platform
→Build and maintain automation scripts for alert enrichment, evidence collection, and containment
→Integrate security platforms via APIs to enable automated detection and response workflows
→Conduct proactive threat hunting across enterprise and cloud environments
→Develop and tune SIEM detections, correlation rules, and EDR queries aligned to MITRE ATT&CK
→Provide technical mentoring and guidance to L1/L2 analysts
→Maintain and enhance SOC documentation including SOPs, runbooks, and response playbooks

Requirements

✓Bachelor’s degree in Computer Science, Cybersecurity, or related discipline
✓Extensive experience in Security Operations with demonstrable time in a senior analyst, threat hunter, or L3 role
✓Strong hands-on experience in cloud security monitoring and incident response across AWS, Azure, or GCP
✓Proven scripting and automation capability using Python, Go, PowerShell, Bash, etc.
✓Practical experience with SOAR platforms and SIEM technologies
✓Deep understanding of EDR tooling, host/network forensics, and detection engineering practices
✓Strong working knowledge of the MITRE ATT&CK framework
✓UK Citizenship is mandatory due to data residency and security clearance requirements
✓Unrestricted right to work in the United Kingdom
✓Availability during weekends and outside standard working hours expected