---
title: 'L3 SOC Analyst at Saviynt'
canonical: 'https://feeny.ai/job/l3-soc-analyst-saviynt-united-kingdom-d1d86q4mgw4r'
type: 'job'
last_seen: '2026-09-07'
---

# L3 SOC Analyst at Saviynt

- **Company:** Saviynt
- **Location:** United Kingdom
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-03-04
- **Last confirmed live:** 2026-09-07
- **Apply:** https://jobs.lever.co/saviynt/bcb3c9f3-3688-446e-b85b-269f8949aa91

## Job description

Saviynt's AI-powered identity platform manages and governs human and non-human access to all of an organization's applications, data, and business processes. Customers trust Saviynt to safeguard their digital assets, drive operational efficiency, and reduce compliance costs. Built for the AI age, Saviynt is today helping organizations safely accelerate their deployment and usage of AI. Saviynt is recognized as the leader in identity security, with solutions that protect and empower the world’s leading brands, Fortune 500 companies and government institutions. For more information, please visit www.saviynt.com.

Location: United Kingdom Type: Full-time, permanent

Due to the nature of the UK Government projects this role supports, this position is classified as a Reserved Post. In accordance with the Civil Service Nationality Rules, paragraph 1 of Schedule 23 and paragraph 5 of Schedule 22 of the Equality Act 2010, we can only accept applications from persons with UK residency (at least five years).

Successful candidates must undergo National Security Vetting (NSV). This role requires Security Check SC level clearance as a minimum. Any offer of employment is strictly conditional upon the candidate successfully obtaining and maintaining this clearance.

To meet the vetting criteria, you will be required to have been resident in the UK for a minimum of 5 years immediately prior to your application. Failure to obtain clearance or a lapse in residency history may result in the withdrawal of the employment offer, and you will not be entitled to any compensation from Saviynt as a result.

In line with the Immigration, Asylum and Nationality Act 2006, all shortlisted candidates will be required to provide original documentation verifying their Right to Work in the UK and their British Citizenship during the initial interview stage. We conduct thorough Baseline Personnel Security Standard (BPSS) checks as a precursor to all higher-level clearances.

Role Overview: We are establishing a modern Security Operations Centre designed to deliver proactive, intelligence-driven security outcomes. Moving beyond traditional reactive monitoring, our SOC emphasises AI, automation, detection engineering, and deep cloud security visibility to identify and neutralise sophisticated threats at scale.

The L3 SOC Analyst will act as the senior technical escalation point within the SOC, leading complex investigations, driving automation initiatives, and mentoring junior analysts. This role requires strong hands-on expertise across cloud security, threat hunting, incident response, and orchestration technologies.

## WHAT YOU WILL DO:

- Incident Response & Technical Escalation
- Act as the final escalation point for complex incidents originating from L1/L2 analysis.
- Lead investigations into high-severity security events, including those impacting AWS, Kubernetes clusters and hybrid environments.
- Perform advanced forensic analysis across endpoints, cloud workloads, and network telemetry to determine root cause, impact, and remediation actions.
- Correlate telemetry from SIEM, EDR, CSPM, and cloud-native sources to identify sophisticated attack chains.
- Security Automation & SOAR Engineering
- Design, develop, and maintain automated response playbooks within the SOAR platform to improve response efficiency.
- Build and maintain automation scripts (Python, go, etc.) for alert enrichment, evidence collection, and containment.
- Integrate security platforms via APIs to enable streamlined, automated detection and response workflows.
- Identify opportunities to reduce Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR) through automation and process optimisation.
- Threat Hunting & Detection Engineering
- Conduct proactive threat hunting across enterprise and cloud environments using intelligence-driven and hypothesis-based methodologies.
- Serve as an SME for cloud security monitoring leveraging tools such as AWS GuardDuty, CloudTrail, CrowdStrike, and Proofpoint.
- Develop and tune SIEM detections, correlation rules, and EDR queries aligned to MITRE ATT&CK tactics and emerging threat intelligence.
- Mentorship & Continuous Improvement
- Provide technical mentoring and guidance to L1/L2 analysts to strengthen SOC capability.
- Maintain and enhance SOC documentation including SOPs, runbooks, and response playbooks.
- Analyse incident trends and operational metrics to recommend improvements in detection coverage, automation effectiveness, and security posture.

## WHAT YOU BRING:

- Bachelor’s degree in Computer Science, Cybersecurity, or related discipline (or equivalent industry experience).
- Extensive experience in Security Operations with demonstrable time in a senior analyst, threat hunter, or L3 role.
- Strong hands-on experience in cloud security monitoring and incident response across AWS - AWS experience is essential for this role.
- Proven scripting and automation capability using Python, Go, PowerShell,Bash,etc.
- Practical experience with SOAR platforms (e.g., CrowdStrike Fusion SOAR) and SIEM technologies (e.g., CrowdStrike Falcon, Splunk, QRadar, Microsoft Sentinel).
- Deep understanding of EDR tooling, host/network forensics, and detection engineering practices.
- Strong working knowledge of the MITRE ATT&CK framework and its application in threat detection and hunting.

## About Saviynt

## Company Overview
- **One-liner**: Saviynt provides an AI-powered identity security and access management platform that secures and governs every identity—human, non-human, and AI agent—across the entire digital ecosystem.
- **Entity Type**: Private (Series B)
- **Headquarters**: El Segundo, California, United States
- **Founded**: 2010
- **Founders**: Not publicly available

## Core Business
- **Primary Industry**: Identity Security & Access Management (IAM/IGA) / Cybersecurity
- **Target Customers**: Large enterprises, Fortune 500 companies, government institutions (B2B, Enterprise)
- **Mission or Purpose**: To safeguard enterprises through intelligent, cloud-first identity governance and access management solutions, helping organizations safely accelerate AI deployment while protecting digital assets and driving operational efficiency.

## Products & Services
- **Saviynt Identity Cloud (Platform)**: An AI-powered platform that manages and governs human, non-human, and AI agent access to applications, data, and business processes across hybrid, cloud, and on-premises environments. It combines Identity Governance and Administration (IGA), Privileged Access Management (PAM), and Application Access Governance (AAG) into a single platform. **Type**: SaaS Platform.

## Market Standing
- **Valuation**: Not disclosed (privately held)
- **Key Metric**: Total Funding of $1.075 billion across multiple rounds. Annual Revenue is $89.3 million.
- **Notable Investors/Partners**: Kohlberg Kravis Roberts & Co. (lead, Series B), HPS Investment Partners, PNC Bank, Carrick Capital Partners. The company serves Fortune 500 companies and government institutions.
- **Growth Signals**: 1,260 employees (+28.0% YoY), 358,442 LinkedIn followers (+86.7% YoY), active job postings up +51.0% year-over-year, global expansion with offices in the US, UK, Australia, Canada, and India.

## Competitive Advantages
- **Unified Platform**: Combines IGA, PAM, and AAG into a single cloud-native platform, reducing complexity and cost for enterprises compared to multi-vendor solutions.
- **AI-Native Architecture**: Built for the AI age, it specifically addresses identity security for AI agents and non-human identities, a rapidly growing market need.
- **Enterprise Scale & Trust**: Designed for the largest, most complex organizations (Fortune 500, government) with a focus on compliance, security, and operational efficiency.
- **Strong Financial Backing**: $1.075 billion in total funding provides significant resources for R&D and market expansion.

## Strategic Focus
- **AI-Driven Identity Security**: Prioritizing the safe acceleration of AI deployment and usage by securing AI agent identities.
- **Global Expansion**: Deepening presence in key markets like India, the UK, Australia, and across Europe.
- **Platform Growth**: Continuing to unify and enhance the Identity Cloud platform to cover the full spectrum of identity challenges.
- **Talent Acquisition**: Aggressively hiring (+51% job postings YoY) to scale engineering, sales, and customer success teams.

## Why Work Here
- **High-Growth Environment**: Headcount grew 28% in the last year, offering strong career advancement potential in a fast-scaling company.
- **Mission-Driven Work**: Tackling critical cybersecurity challenges for the world’s largest organizations.
- **Global & Remote-First Culture**: Remote-friendly roles and hybrid options available, with offices in major cities globally (El Segundo, London, Sydney, Bengaluru). [saviynt.com](https://saviynt.com/careers)
- **Strong Compensation & Benefits**: Competitive base pay with bonuses, medical/dental/vision, retirement programs, and flexible time off. [saviynt.com](https://saviynt.com/careers)
- **Positive Employee Sentiment**: Average employer rating of **4.0/5.0** (436 reviews), with strong compensation (4.1) and career opportunity (4.0) scores. [linkedin.com](https://linkedin.com/company/saviynt)
- **Diverse, Global Team**: Workforce spans 23 countries, offering a rich, multicultural work experience.

## Sources
1. [LinkedIn Company Profile](https://linkedin.com/company/saviynt)
2. [Saviynt Careers Page](https://saviynt.com/careers)
3. [Saviynt About Us](https://saviynt.com/company/about-saviynt)
4. [Lever Job Postings](https://jobs.lever.co/saviynt)
5. [CB Insights Profile](https://www.cbinsights.com/company/saviynt)

## Other roles at Saviynt

- [Marketing Analytics & Data Visualization Architect (Remote, USA)](https://feeny.ai/job/marketing-analytics-data-visualization-architect-remote-usa-saviynt-united-xpt09m01j12s) — United States
- [Junior Accountant - Accounts Receivable (AR)](https://feeny.ai/job/junior-accountant-accounts-receivable-ar-saviynt-bengaluru-dqx74jatqmkp) — Bengaluru, India
- [Junior Accountant  - Billing](https://feeny.ai/job/junior-accountant-billing-saviynt-bengaluru-hh7hban9w4hj) — Bengaluru, India
- [Senior Sale Engineer](https://feeny.ai/job/senior-sale-engineer-saviynt-boston-fpfyb6j7ycgy) — Boston, MA
- [Technical Support Engineer (PAM)](https://feeny.ai/job/technical-support-engineer-pam-saviynt-bengaluru-pnxj3ekr0rh2) — Bengaluru, India
- [Distinguished Software Engineer, Data Platform](https://feeny.ai/job/distinguished-software-engineer-data-platform-saviynt-milpitas-jwy2235xqveh) — Milpitas, CA
- [Named Enterprise Account Executive - San Francisco, California](https://feeny.ai/job/named-enterprise-account-executive-san-francisco-california-saviynt-san-8hqrdvb65vzr) — San Francisco, CA
- [Senior Accountant - Contract Review Specialist](https://feeny.ai/job/senior-accountant-contract-review-specialist-saviynt-bengaluru-gx94x9bws1jn) — Bengaluru, India
- [Senior Accountant - Collections](https://feeny.ai/job/senior-accountant-collections-saviynt-bengaluru-st7e2tennfy7) — Bengaluru, India
- [Associate Principal Training Engineer](https://feeny.ai/job/associate-principal-training-engineer-saviynt-japan-n6ea26dcr1j0) — Japan