[Skip to main content](#main-content)

[ OpenNash ](https://opennash.com/) / [Jobs](https://jobs.opennash.com/) [ 01 Search jobs](https://jobs.opennash.com/search/)[ 02 Companies](https://jobs.opennash.com/explore/)[ 03 Hiring report](https://jobs.opennash.com/reports/hiring/)[ 04 AI assistants](https://jobs.opennash.com/connect/)[ 05 How it works](https://jobs.opennash.com/methodology/)

Booz Allen Hamilton Holding · Cambridgeshire

# Tier 3 SOC Analyst, Senior

Cambridgeshire Full-time Senior individual contributor 

Listed on Booz Allen Hamilton Holding’s official careers site. Posted October 14, 2026. Check that it is still open and apply there.
[Apply on Booz Allen Hamilton Holding’s careers site →](https://bah.wd1.myworkdayjobs.com/BAH_Jobs/job/Cambridgeshire/Tier-3-SOC-Analyst--Senior_R0251265)

[OpenNash Jobs](https://jobs.opennash.com/) / [Booz Allen Hamilton Holding](https://jobs.opennash.com/companies/booz-allen-hamilton-holding/) / Tier 3 SOC Analyst, Senior

## Job description

Tier 3 SOC Analyst, Senior The Opportunity: Are you looking for an opportunity to lead complex cyber incident investigations, provide senior technical direction during high-severity events, and help strengthen an enterprise cyber defense capability? Cyber threats continue to evolve in speed and sophistication, and effective response requires experienced practitioners who can combine deep technical investigation skills with calm operational leadership and clear communication.

We are looking for a senior Tier 3 Incident Response Analyst who can lead investigations from escalation through resolution or handover, operate effectively under time pressure, and work across SOC, incident response, infrastructure, identity, legal, risk, and business teams. You will act as a senior escalation point for Tier 1 and Tier 2 analysts, helping evaluate triage, scope incidents, establish priorities, and determine the appropriate containment, eradication, recovery, and escalation actions.

In this role, you will remain hands-on with incident investigation and forensic analysis while maintaining oversight of case management, evidence tracking, incident reporting, and stakeholder coordination. You will provide clear technical direction to other analysts, support post-incident reviews, and translate lessons learned into improvements to controls, playbooks, procedures, detection use cases, and operational documentation.

You will also contribute to the continuous improvement of SOC and incident response operations through metrics, workload management, automation, and service improvement. As a senior member of the team, you will coach and mentor junior and mid-level analysts and may act as the technical lead for a shift, investigation, or major incident. This is an opportunity to combine strong DFIR and cyber defense expertise with leadership, collaboration, and a continuous-improvement mindset.

Join us. The world can’t wait.

### You Have

Experience in cyber security operations, digital forensics, threat hunting, or a cyber defense field, including leading or supporting complex investigations, and leading Tier 3 investigations through triage, scoping, containment, eradication, recovery, resolution, or structured handover Experience with EDR/XDR, NDR, and SIEM technologies to investigate endpoint, network, identity, and security telemetry, and performing forensic analysis of major incidents, reconstructing threat actor activity, developing investigation timelines, and identifying indicators of compromise and root cause Experience coordinating incident response activity across SOC analysts, infrastructure, identity, system owners, legal, risk, and business stakeholders Experience with case management, evidence handling and tracking, escalation, incident reporting, and post-incident review activities Experience coaching or mentoring analysts and contributing to team development, operational workload management, or shift leadership
- Knowledge of incident response and adversary frameworks, including NIST Incident Response and MITRE ATT&CK, and applying them in operational investigations
- Ability to provide clear technical direction to Tier 1 and Tier 2 analysts, review analysis, challenge assumptions, and improve investigative quality
- Ability to communicate technical findings clearly to technical and non-technical stakeholders, including senior stakeholders, during high-pressure incidents
- Ability to work collaboratively across cyber defense capabilities and wider technology teams while demonstrating ownership, curiosity, sound judgement, and continuous improvement
- Bachelor’s degree or 5+ years of experience in an information technology, cybersecurity, or incident response field in lieu of a degree Nice If You Have: Experience managing or leading a SOC, incident response team, or deployable cyber defense capability Experience with threat hunting, detection engineering, SIEM use-case tuning, false-positive reduction, or security automation and scripting Experience with Windows and enterprise infrastructure, including Active Directory, server platforms, virtualization, network devices, firewalls, and cloud environments Experience collaborating with third-party vendors, government, military, or other external organizations during cyber operations or exercises Experience translating investigation findings and lessons learned into playbook, control, detection, or process improvements Industry-recognized DFIR or cyber defense certifications such as GIAC Certified Forensic Analyst (GCFA), GIAC Certified Incident Handler (GCIH), GIAC Continuous Monitoring (GMON), GIAC Penetration Tester (GPEN), or equivalent certifications Identity Statement As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud.

You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud. Candidate AI Usage Policy AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge.

As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided. Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.

## At a glance
- Posted by the employer: Oct 14, 2026
- First seen by OpenNash: Oct 27, 2026
- Last checked: Oct 27, 2026
- Listed for: 13 days
- Location: Cambridgeshire
- Employment type: Full-time[Apply on Booz Allen Hamilton Holding’s careers site →](https://bah.wd1.myworkdayjobs.com/BAH_Jobs/job/Cambridgeshire/Tier-3-SOC-Analyst--Senior_R0251265)

## Hiring at Booz Allen Hamilton Holding
- Open jobs: 2,854
- New in the last 7 days: After two weekly collections
- Tracked since: Jul 10, 2026

[All Booz Allen Hamilton Holding jobs](https://jobs.opennash.com/companies/booz-allen-hamilton-holding/) · [Weekly hiring report](/reports/hiring/)

## More jobs at Booz Allen Hamilton Holding

### [Wargaming Analyst, Mid](https://jobs.opennash.com/companies/booz-allen-hamilton-holding/jobs/58b95e6b2af3ae6a557b/)

Cambridgeshire

### [All-Source Intelligence Data Scientist](https://jobs.opennash.com/companies/booz-allen-hamilton-holding/jobs/30e02fcdbde8e712e0dd/)

Cambridgeshire

### [Construction Security Technician](https://jobs.opennash.com/companies/booz-allen-hamilton-holding/jobs/8a72c4453dccc2a16371/)

Cambridgeshire

### [Construction Surveillance Technician & Site Security Coordinator](https://jobs.opennash.com/companies/booz-allen-hamilton-holding/jobs/408d00541244118b898e/)

Cambridgeshire

### [Full Stack Developer](https://jobs.opennash.com/companies/booz-allen-hamilton-holding/jobs/1ec5c52adb0f4698dbf2/)

Cambridgeshire

## Similar jobs at other companies

### [SOC Analyst Tier 1](https://jobs.opennash.com/companies/ntt/jobs/8db6a502f79bc53d2b5c/)

NTT · Ha Noi, Hà Nội, Vietnam

### [SOC Analyst Tier 2](https://jobs.opennash.com/companies/ntt/jobs/ee0c03a3b6265809e68f/)

NTT · Ha Noi, Hà Nội, Vietnam

### [SOC Tier 3 Analyst (GTS - Command Centre)](https://jobs.opennash.com/companies/oversea-chinese-banking/jobs/b6fe4222ef78499f3476/)

Oversea-Chinese Banking · OCBC Singapore

### [SOC Analyst](https://jobs.opennash.com/companies/bouygues/jobs/03da57d3583b8b9b51fe/)

Bouygues · Romania

### [SOC Analyst (M/F/X)](https://jobs.opennash.com/companies/bouygues/jobs/18cc7af7dbd8e5523e31/)

Bouygues · COURBEVOIE, France

OpenNash lists jobs from employers’ own careers sites and does not handle applications.
Dates come from the employer where stated; “first seen” and “last checked” are our own observations.

[ OpenNash ](https://opennash.com/)

AI-native services firm that builds custom software and 24/7 AI agents.

OpenNash Jobs is an OpenNash Applied AI project.
[Book time with OpenNash](https://calendly.com/opennash/new-meeting?hide_gdpr_banner=1)

Jobs
- [Search jobs](https://jobs.opennash.com/search/)
- [Companies](https://jobs.opennash.com/explore/)
- [Hiring report](https://jobs.opennash.com/reports/hiring/)
- [AI assistants](https://jobs.opennash.com/connect/)
- [How it works](https://jobs.opennash.com/methodology/)

OpenNash
- [opennash.com](https://opennash.com/)
- [Services](https://opennash.com/ai-agent-consulting/)
- [OpenNash CX](https://opennash.com/cx/)
- [AI Tools](https://opennash.com/ai-tools/)
- [Blog](https://opennash.com/blog/)
- [About](https://opennash.com/about/)

Contact
- [hello@opennash.com](mailto:hello@opennash.com)

- [LinkedIn](https://www.linkedin.com/company/opennash)

- [Support](https://jobs.opennash.com/support/)

- [Privacy](https://jobs.opennash.com/privacy/)

- [Terms](https://jobs.opennash.com/terms/)

© 2026 OpenNash, Inc. Company names and public job postings belong to their respective owners. Employers control source availability and application decisions.