L2 SOC Analyst

About Us

ACE Money Transfer is a UK-based multinational company headquartered in Manchester, United Kingdom. ACE Money Transfer provides online remittance services to individuals in 29 countries across the UK, Europe, Canada, and Australia, enabling them to send money across borders in over 100 countries.

ROLE OVERVIEW

Senior SOC analyst responsible for in-depth investigation of incidents escalated by L1, with deep hands-on expertise across SIEM, EDR/XDR platform, and MDM platform. Leads active incident response, drives detection improvements, and mentors L1 analysts.

KEY RESPONSIBILITIES

• Investigate L1-escalated incidents using SIEM advanced correlation, rule tuning, and full attack timeline reconstruction
• Conduct deep endpoint investigations via EDR/XDR platform: Live Discover queries, process tree analysis, behavioural detections, and endpoint isolation
• Investigate MDM platform incidents: device compliance failures, unenrolment events, jailbreak detection, and policy bypass attempts
• Lead incident response including containment, eradication, and recovery in line with ACE's IRP and P1–P4 escalation timelines
• Perform cross-platform log correlation across SIEM, EDR/XDR platform, MDM platform, WAF, cloud platform, M365, and Identity platform / MFA platform
• Produce incident reports with root cause, IOCs, affected assets, and remediation recommendations
• Provide detection improvement feedback , SIEM rule gaps, EDR/XDR platform false positives, MDM platform alert noise
• Mentor L1 analysts and quality-review triage outputs
• Support regulatory breach notification obligations (FCA, UK-GDPR, CBI, DORA,)

REQUIRED SKILLS & EXPERIENCE

• 3–5 years in a SOC or IR role, with at least 1 year at L2 or equivalent
• Hands-on expertise with SIEM — rule authoring, SIEM backend queries, log source integration
• Hands-on expertise with EDR/XDR platform or equivalent EDR/XDR platform
• Working knowledge of MDM security monitoring (MDM platform, Intune, or Jamf)
• Strong MITRE ATT&CK and D3FEND knowledge applied to detection and response
• CompTIA CySA+, CompTIA Security+ any other would be a plus

DESIRABLE

• SIEM custom decoder and active response scripting
• MDR service case management experience
• SOAR or automation platform experience
• Financial services regulatory environment (FCA, PCI DSS, DORA)

ACE Money Transfer profile: https://acemoneytransfer.com/company-profile