Senior SOC Analyst

About The Role

At EDF, success is personal. Here you’ll develop a career that’s unique to you. Whether you want to move horizontally, deepen your specialty, or advance through the levels — it’s your journey, powered by us.

The Opportunity

The Senior SOC Analyst is responsible for working with business teams investigating and remediating anomalous events detected by the SOC. You will be a technical expert in the analysis and follow up of SOC incidents, ensuring these incidents are handled in accordance with the expectations of a CNI regulated organisation. You will work in the EDF UK SOC team.

Pay, Benefits And Culture

Alongside a salary of £60,000 (DOE) and a market-leading pension scheme, your package will include a range of benefits, from the big and formal to the small and personal.

We’re talking about everything from enhanced parental leave to electric vehicle leasing, health insurance to product discounts, critical illness insurance to technology vouchers, gym membership to season ticket loans.

At EDF UK, we embrace flexibility while recognising that everyone's working needs are different. Whether you're in our office spaces, on site, or working remotely, we promote an environment that supports collaboration, connection, and comfort. No matter where you are, our priority is to make sure you feel safe, valued, and celebrated.

Here, we do right by each other and everyone’s welcome. We’re on an action-oriented journey, championing equity, diversity, and inclusion. We’d like our future workforce to have an equal gender balance, represent a broad mix of people from minority ethnic backgrounds, LGBTQ+, those with a disability and supporting social mobility.

We’re a disability confident employer and we’ll do all we can to help with your application. Please let us know if you need to request reasonable adjustments.

We take pride in fostering a dynamic and inclusive environment, where the diverse backgrounds and experiences of our employees drive fresh thinking and innovation. We understand that success means different things to different people. We believe there are multiple definitions of what it means to succeed. That’s why we support you to pursue a career that’s unique to you. Because success is personal.

What You’ll Be Doing

Incident Management & Response

• Perform root cause analysis of security incidents, understand attack paths, and develop or improve response playbooks.
• Coordinate with technical and business teams across cloud platforms (AWS, Azure) and endpoints to support remediation and recovery.
• Provide technical guidance during investigations using alert data and logs.
• Respond to incidents promptly, investigate thoroughly, and mitigate risks effectively. Maintain and update incident response playbooks.
• Analyse data from logs, SIEM, and forensics; produce detailed reports and liaise with SecOps and SOAR teams.
• Lead incident reporting efforts and ensure templates and processes are current. Act as the key expert in cyber incident reporting at EDF (UK).
• Advise on and help optimize EDR/XDR toolsets and MDR services to meet incident response needs.
  
  

Stakeholder & Compliance

• Translate technical threats into clear business risks and mitigation actions for management.
• Collaborate with GRC to ensure compliance with regulations and frameworks (e.g. NCSC CAF, ONR SyAPs, ISO27001).
• Support major security incidents and exercises with forensic and technical expertise.
  
  

Who You Are

We’re looking for a skilled SOC Analyst with experience in SOC operations and cyber incident response. You’ll have worked extensively with enterprise cloud platforms, ideally Azure and/or AWS.

If you’re ready to take on more senior responsibilities, engage with diverse stakeholders, and confidently present complex technical information to leadership, this could be the perfect opportunity for you.

Key Skills & Experience:

• Proven experience in SOC operations and familiarity with related tools and techniques across traditional and cloud environments.
• Strong understanding of adversary tactics, techniques, and procedures (TTPs), with expertise in frameworks such as MITRE ATT&CK.
• Ability to translate complex technical issues into clear, business-focused updates and reports.
• Skilled in log analysis and using cyber defense tools to identify root causes and remediate suspicious activity.
• Committed to fostering a culture of service excellence and continuous improvement.
  
  

Please note, it is a requirement of this role that the post-holder either currently holds or can obtain and maintain Security Check (SC) clearance.

If this sounds like you, then we’d love to hear from you!

Closing date for applications: 31st August 2025

Location: Gloucester/London/Hove/Doxford (Hybrid - Flexible)

Success is personal. It's your journey, powered by us. Join us and we'll help Britain achieve Net Zero together.