Introduction




Company cultures & job summary



Our client is looking for an experienced SOC Analyst to join their security operations team.



You'll need hands-on IBM QRadar SIEM experience and a solid background in incident response and threat detection.




This is a 3 month contract with likely extension




Working Patterns and location - Hybrid - 1 days on site per week in Essex (remote opportunities also available)




Key responsibilities



• Monitor and investigate security alerts using IBM QRadar SIEM daily.



• Triage and prioritise security incidents across multiple platforms and environments.



• Manage incidents through the full lifecycle from detection to post-incident review.



• Perform root cause analysis and produce detailed incident reports.



• Analyse logs across security platforms to detect threats and suspicious activity.



• Identify malicious network traffic, endpoint alerts, and unusual authentication behaviour.



• Manage log sources in QRadar, including troubleshooting and tuning opportunities.



• Investigate non-standard cyber requests and escalate where appropriate.




Skills & experience



• Minimum 2-3 years' hands-on experience working within a Security Operations Centre.



• Proven daily operational experience with IBM QRadar SIEM for monitoring and incident response.



• Strong experience triaging and investigating security alerts across enterprise platforms.



• Experience managing the full incident response lifecycle including containment and evidence collection.



• Proficiency in common query languages, particularly KQL.



• Strong knowledge of MITRE ATT&CK, Cyber Kill Chain, and NIST Cyber Security Framework.



• Experience with Microsoft Defender and Microsoft EDR for endpoint security monitoring.



• Experience investigating incidents including phishing, malware, ransomware, and lateral movement.




The client would also like to see some of the below, but this is not essential:



• Experience with Microsoft Sentinel as an additional SIEM platform.



• QRadar Use Case Manager experience.



• Threat hunting experience across enterprise environments.



• Familiarity with Microsoft Entra ID / Azure AD in a security context.



• Experience identifying and implementing SIEM tuning opportunities.




Our client is committed to providing a diverse and inclusive workplace and welcomes applications from all backgrounds.




Part-time opportunities/flexible working is available to suit individual needs.




Please note that the client has determined that the off-payroll working rules will apply to this assignment and therefore this contract will be run through an Umbrella Company. Income tax and primary national insurance contributions will be deducted at source from any payments made to the intermediary.




RECOMMEND A FRIEND: If you have professional friends/colleagues who would be interested in one of our roles and our excellent levels of service too, we'd like to recognise your recommendations with a 'thank you' of our own. For every friend you refer who then starts a role through Datasource either Contract or Permanent, we will send you £200 of Love to Shop Gift Vouchers & gift your friend £100 in Love to Shop Gift Vouchers as well!



You will be required to hold a minimum of SC Clearance. If you do not hold an active SC Clearance, please familiarise yourself with the vetting process before applying.



(c) Copyright Datasource Computer Employment Limited 2026.