L3 SOC Analyst

About the role

Saviynt is building a modern Security Operations Centre that leverages AI, automation and deep cloud visibility to detect and neutralise sophisticated threats. The L3 SOC Analyst will serve as the senior technical escalation point, leading complex investigations, driving automation initiatives and mentoring junior analysts within this high‑impact environment.

Key responsibilities

• Act as the final escalation point for high‑severity incidents originating from L1/L2 analysts.
• Lead investigations into security events affecting AWS, Kubernetes clusters and hybrid cloud environments.
• Perform advanced forensic analysis across endpoints, cloud workloads and network telemetry.
• Design and implement automation and detection‑engineering solutions to improve SOC efficiency.
• Mentor and guide junior analysts, sharing best practices and technical knowledge.

Required profile

• Minimum five years UK residency and eligibility for SC‑level security clearance.
• Proven experience in a senior SOC or incident‑response role, preferably within government or regulated sectors.
• Strong analytical mindset with the ability to handle complex, multi‑vector security incidents.

Required skills

• AWS
• Kubernetes
• Cloud security
• Threat hunting
• Incident response
• Forensic analysis
• Automation
• Detection engineering
• Orchestration