L3 SOC Analyst – Dublin

Dublin

Security - Security Engineering

Contract

Senior L3 SOC Analyst
Duration: 6-Month Rolling Contract
Location: Dublin, Hybrid – 2/3 days onsite per week
Day Rate: €400-530 p/d

Our client, a leading financial services client in Dublin, is hiring a highly skilled Level 3 (L3) SOC Analyst for a critical, long-term contract engagement. This is an exceptional opportunity for a Microsoft Security expert to take ownership of the client’s Microsoft Sentinel environment and drive advanced Threat Hunting and Incident Response capabilities.

As the L3 SOC Analyst, you will be the Subject Matter Expert (SME) and the final escalation point for all security incidents. This role is not just about monitoring; it’s about architecting, optimising and leading. You will be instrumental in maturing the client’s Security Operations Center (SOC) function, leveraging the full power of the Microsoft Security suite.

Responsibilities

Act as the primary technical lead for the MS Sentinel platform, focusing on advanced configuration, optimisation and maintenance.
Proactively hunt for sophisticated threats across the environment using Kusto Query Language (KQL) and custom analytics rules.
Lead complex security incident investigations, providing deep technical analysis and coordinating remediation efforts with internal teams.
Develop and implement Security Orchestration, Automation and Response (SOAR) playbooks within Sentinel using Azure Logic Apps or Power Automate to enhance efficiency.
Provide expert guidance and mentorship to L1/L2 analysts, serving as the definitive escalation point for challenging security events.
Generate high-quality, actionable reports on security posture, incident trends and threat intelligence.

Skillset

5+ years’ experience in a SOC environment, with significant L3 / Senior Analyst responsibility.
Advanced experience with Microsoft Sentinel, including deployment, tuning and optimisation.
Strong understanding of SIEM and SOAR concepts.
Expert-level proficiency in Kusto Query Language (KQL).
Hands-on experience with Microsoft Defender XDR, covering Endpoint, Identity, Cloud Apps and Office 365.
Certifications in SC-200 – Microsoft Security Operations Analyst, AZ-500, CISSP, GIAC are highly desirable.