Security Operations (SOC) Recruitment

SOC talent spans a wide range: from L1 analysts triage-ing alerts through to SOC managers running 24/7 operations and detection engineers building the logic that drives them. We recruit across in-house teams, MSSPs, and hybrid SOC environments.

The market

SOC is one of the most volume-driven hiring markets in cyber security. Demand for L1 and L2 analysts is consistent and broad, but the conversion rate from application to placement is high — many candidates claim SOC experience without the tool depth or triage competence employers need. At L3 and above, and particularly for Detection Engineers and SOC Managers, the market is highly competitive and candidates are rarely available on the open market.

Roles we recruit

• SOC Analyst L1 / L2 / L3
• Threat Hunter
• SOC Manager
• Detection Engineering Lead
• SIEM Engineer
• Security Engineer – Monitoring
• SOC Team Lead
• Managed SOC Consultant

Experience and skills

Junior SOC analysts typically enter from IT support, networking, or cyber security degrees, building SIEM and alert triage skills on the job. Mid-senior SOC professionals develop threat hunting and detection engineering capability over time, often specialising in a specific SIEM platform. SOC Managers combine technical depth with operational leadership — a genuinely hard combination to find.

• SIEM (Splunk / Microsoft Sentinel / QRadar)
• Log Analysis & Alert Triage
• EDR (CrowdStrike / SentinelOne / Defender)
• MITRE ATT&CK Framework
• Threat Hunting Methodology
• Incident Escalation & Response
• Detection Rule Writing (KQL / SPL)
• CompTIA Security+ / SC-200 / BTL1