Security Analyst

Security Clearance: Must be eligible for SC Clearance

We are looking for an experienced Senior Security Operations Analyst to join a busy and fast-paced security team. This is a hands‑on 2nd/3rd line Sec Ops role focused on monitoring, investigation, and response activities across a complex enterprise environment.

You’ll be responsible for managing security alerts, conducting investigations, and supporting incident response activities, helping to protect critical systems and services. This role is ideal for someone who enjoys operational security and incident management rather than dedicated threat hunting.

• Monitor, triage, and investigate security alerts and incidents.
• Perform detailed analysis of security events and suspicious activity.
• Lead and support incident response activities, including containment, remediation, and recovery.
• Utilise Microsoft Sentinel and Microsoft Defender to detect and respond to threats.
• Support and maintain security monitoring use cases and detection capabilities.
• Collaborate with infrastructure, cloud, and support teams to resolve security issues.
• Produce investigation reports and provide recommendations to improve security posture.
• Contribute to continuous improvement of security operations processes and procedures.
• Act as an escalation point for complex security incidents and investigations.

• Approximately 5 years’ experience within a Security Operations (Sec Ops) environment.
• Strong experience working in a 2nd/3rd line security operations role.
• Experience with AWS security services and cloud security operations.
• Hands‑on experience with Microsoft Sentinel.
• Hands‑on experience with Microsoft Defender.
• Strong understanding of incident response, alert triage, and security investigations.
• Experience analysing logs, alerts, and security telemetry from multiple sources.
• Ability to prioritise workload effectively in a busy operational environment.
• Strong communication and stakeholder management skills.

• Knowledge of security frameworks and best practices.
• Relevant security certifications (e.g., SC-200, AWS Security Specialty, Security+, CISSP, GCIH).
• Experience working within regulated or security-sensitive environments.