Security Analyst

About Doherty Associates

Doherty Associates (DA) have delivered IT solutions for over 30 years to world-renowned, international clients, primarily within the professional and financial services sectors. We are a Microsoft Solutions Partner with multiple designations, hold a Tier 1 Microsoft CSP relationship, and operate to ISO
27001 & ISO
9001 standards.

Our services are built on the Microsoft cloud ecosystem and focused on delivering secure, high-quality, outcome-driven solutions for our clients. Our customers rely on us to bring specialist expertise and innovation across cloud solutions, hybrid working, modern workplace, data and BI, cyber security, governance and compliance. We have built a reputation as a company that keeps its promises and delivers quality.

This role is office based, Monday to Friday, between the hours 10:30 and 19:00.

Reporting to the Head of Managed Services, the Security Analyst is part of our Managed Services department and is responsible for the day-to-day delivery of our security services to DA customers. You will act as a first responder on security tickets, triaging and resolving alerts, incidents and requests, and remediating issues to bring customer environments in line with our defined security baselines.

Alongside incident work, you will deliver the regular activities that keep our customers secure and informed - vulnerability scanning and remediation, patching and configuration compliance monitoring, security awareness training and phishing simulations - and produce clear, structured reports that translate technical findings into prioritised, actionable recommendations for customers.

This role will best suit someone early in their cyber security career who is keen to learn, with a solid grounding in Microsoft 365 and a genuine interest in security. You will work closely with our 2nd and 3rd Line Security Engineers, who will support your development and to whom you will elevate more complex work to. While technical ability matters, equally important are strong customer-facing attributes - active listening, empathy, attention to detail and clear communication - as you will regularly engage directly with customers.

You will form part of the security escalation path, which may include overtime, changes to shift pattern and/or an on-call cover.

• Act as a first responder on security tickets; responding promptly to alerts, incidents and requests logged by customers
• Assess, classify and prioritise incoming security tickets in line with internal SLAs, escalating where appropriate so that incidents progress without delay
• Accurately log and efficiently progress tickets within the Connect Wise Manage platform
• Keep detailed notes and time entries within tickets, so that anyone reading a ticket for the first time has all the information required to progress it

• Resolve security tickets within your technical ability and collaborate with the wider team (2nd / 3rd Line Security Engineers and other specialists) to reach timely resolutions
• Remediate security issues to bring customer environments in line with defined security baselines, escalating to senior engineers where remediation is beyond your technical ability
• Support patching compliance and security configuration monitoring, investigating and remediating issues and escalating root-cause findings to senior engineers where required

• Form part of the security escalation path, which may include overtime, changes to shift pattern or on-call cover

• Deliver outstanding customer service across all forms of communication
  • As part of a wider team, create tickets or route calls through to other engineers as required
  • Ensure accurate, consistent, clear and understandable communication via tickets, email and over the phone

• Carry out regular Vulnerability Management Service activities, such as running scans, producing reports and performing remediation activities

• Manage the delivery of Security Awareness Training and Phishing Simulations using our online platform
• Follow existing procedures and act as a champion of security documentation on the desk, amending existing guides and creating new ones where applicable

• Produce clear, structured reports outlining risks, findings, and recommended improvements
• Record findings in client risk logs and present them to customers as required, providing actionable, prioritised remediation guidance

• Support ongoing improvement of customers' security posture through regular reviews, reassessments and follow-up of outstanding remediation actions

• Accurately complete daily timesheets and expenses reporting requirements

• Support training and onboarding of junior and new engineers in the DA office
• Promote an inclusive,…