Security Delivery Senior Analyst

About the role

The Security Delivery Senior Analyst works within the Security Operations Center to take ownership of security incidents escalated from Level‑1 analysts, performing deep triage, investigation and analysis while ensuring consistent handling according to established processes.

Key responsibilities

• Lead incident triage, validation and investigation, categorising events by severity and escalating high‑risk cases as needed.
• Collaborate with SIEM administrators and security engineers to create, test and refine detection use cases and correlation rules.
• Develop and maintain SOPs, investigation playbooks and incident‑response plans, capturing lessons learned to improve SOC procedures.
• Identify detection gaps during investigations and work with relevant teams to close them.

Required profile

• Hands‑on experience in a SOC or cybersecurity monitoring environment, including incident escalation and response.
• Strong understanding of incident‑response processes, SOC runbooks and security alert classification.
• Proven ability to document investigations, maintain evidence and produce clear incident reports.

Required skills

• Security Information and Event Management (SIEM) technologies and detection use‑case development.
• Endpoint Detection and Response (EDR) and Security Orchestration, Automation and Response (SOAR) platforms.
• Familiarity with MITRE ATT&CK framework and common attack techniques.
• Threat hunting and deep incident investigation capabilities.