Senior Security Analyst

If you’re the kind of security engineer who can spot an active threat, contain it calmly, and then harden the environment so it doesn’t happen again, this role is built for you.

We’re hiring a hands-on Senior Security Analyst / Security Engineer to strengthen a Microsoft-centric security posture across detection, response, tooling, and infrastructure hardening.

This is not a one-lane SOC role and not a governance-only position. If you enjoy both incident response and engineering security controls, this one’s for you.

You’ll work across detection, response, vulnerability management, security tooling, M365 security, and infrastructure hardening. Ideal for someone with 4–5 years’ experience who wants real technical ownership — not just alert monitoring.

What You’ll Be Doing

• Lead investigations, triage, and containment using SIEM/EDR (Sentinel preferred)
• Harden IAM, PIM/PAM, Windows/Linux and identity services
• Strengthen M365 security:
  Defender, Identity Protection, Conditional Access
• Run vulnerability scanning & remediation cycles
• Improve detection rules, baselines, and security automation
• Support compliance (ISO 27001, Cyber Essentials, NIST) and resilience exercises
• Drive proactive threat hunting and posture improvements

Essential Experience (Must Haves)

• Power Shell (strong scripting & automation)
• Microsoft Sentinel or equivalent SIEM (Sentinel strongly preferred)
• EDR/XDR experience (Defender / Crowd Strike / Sentinel One)
• Strong understanding of MITRE & OWASP
• Hardening & tooling experience (IAM, PIM/PAM, endpoint/security baselines)
• M365/Defender security exposure (Identity, Endpoint, O365)
• Vulnerability management tooling (Tenable, Pentera, Secure Score)
• 4–5 years in security engineering / SOC / incident response roles

Nice to Haves (Not Essential, But a Bonus)

• Terraform / Ansible
• Azure / AWS / GCP cloud security exposure
• Threat hunting & threat intel platforms
• CI/CD security (Git Hub Actions, Jenkins, Git Lab)
• Certifications:
  
  Security+, CySA+, GCIH, GCIA, CISSP, CISM, OSCP, CCSP

If you’re looking for a role where you can respond to real threats, engineer lasting fixes, and drive meaningful security improvements, reach out for a confidential conversation!