Security Operations Analyst

Security Operations Analyst – Intercity Technology – Bedfordshire, England, UK

Protect customers. Respond with precision. Help shape the future of our SOC.

Intercity is looking for a driven and detail‑oriented Security Operations Analyst to join our growing Security Operations Centre (SOC). This is a hands‑on role at the heart of our security services where you’ll be responsible for monitoring, analysing and responding to security incidents for our customers using Microsoft’s leading security technologies.

You’ll work closely with senior analysts and engineers, playing a key role in incident response while also contributing to the continuous improvement and evolution of our SOC services.

As a Security Operations Analyst you will:

• Provide day‑to‑day monitoring and initial response for SOC customers in line with Intercity’s Security Incident Response Framework.
• Investigate alerts generated by Microsoft Sentinel and Microsoft Defender for 365, identifying true positives and responding appropriately.
• Analyse multiple security data sources to detect malicious activity and support containment actions.
• Communicate clearly and professionally with customers and third parties where security risks are identified.
• Work with Senior Security Analysts to identify threat patterns and recommend strategies to reduce risk across customer environments.
• Contribute to the ongoing development of the SOC service through:
  • Tuning detection rules within Microsoft Sentinel
  • Improving automation and ticket workflows
  • Identifying vulnerabilities within Microsoft Defender 365 and supporting customers in improving their overall security posture.

• Strong demonstrable experience with:
  • Microsoft Sentinel
  • Microsoft Defender for 365
  • Microsoft Azure
• Proven experience investigating and responding to security incidents.
• Solid understanding of Microsoft cloud security controls, tools and technologies.
• Ability to analyse cloud security risks and recommend appropriate controls.
• Understanding of Log Ingestion and Log Analytics.
• Familiarity with the MITRE ATT&CK framework.

Essential

• Microsoft Certified: Security Compliance and Identity Fundamentals (SC-900)
• Microsoft Certified: Security Operations Analyst (SC-200)

Desirable

• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Administering Information Security in Microsoft 365 (SC-401)
• Microsoft Certified: Azure Administrator (AZ-104)

• Takes ownership with a can‑do attitude.
• Calm and methodical in high‑pressure situations.
• Strong attention to detail and analytical thinking.
• Amiable, flexible and collaborative team player.

• 33 days holiday (inclusive of bank holidays) with entitlement increasing by one day for each full calendar year employed up to a maximum of five days.
• Annual pay reviews.
• All‑company bonus scheme.
• Death in service cover.
• Employee assistance programme.
• Company pension.
• Active social calendar.
• A strong focus on developing our people.

Intercity Technology provides reliable and secure technologies in communications, cloud and managed services with a big difference. Intercity is a technology solutions partner that isn’t all about tech – it’s about a great bunch of people combining their passion, expertise and dedication to deliver extraordinary results for businesses.

Our vision is to be the best technology partner to work for and with. We are really proud of our achievements so far:

• Customer Net Promoter Score of 92
• Gold Award Investors in People Accreditation
• 3‑star World Class Best Companies accreditation
• Platinum Eco Vadis rating

We select candidates with the right skills, experience and values to join us and the selection is based on a fair and equal process. We’re proud to be committed to equal opportunities and welcome all applications. As a specialist in secure technology solutions all successful candidates will be subject to pre‑employment checks so we can ensure compliance with our ISO 27001 (Information Security) and Cyber Essentials Plus certifications.

We are committed to using any personal information that you may give us in a secure and proper manner for more information please see our privacy policy on our website.

Employment Type: Full‑Time

Experience: years

Vacancy: 1