24 x 7 Security Analyst

Role purpose

Key responsibilities

• Provide proactive defensive monitoring for clients and respond to alerts and customer requests within agreed SLAs.
• Produce detailed, actionable incident reports with recommendations, mitigations, and remediations.
• Maintain awareness of defensive monitoring technologies and current cyber threats.
• Produce management and operational reports, and maintain investigation, process, and use-case documentation.
• Tune alerts, playbooks, and automations; contribute to service projects and security technology upgrades.
• Communicate with customers, suppliers, and internal teams; complete assigned projects and reporting.

Required qualifications and experience

• Experience deploying, configuring, and operating Microsoft Sentinel and Microsoft Defender tools in an enterprise environment.
• Knowledge of SIEM and EDR/EPP, and experience using Microsoft security tools for detection, investigation, and response.
• Experience investigating large security datasets and using KQL for custom Sentinel queries and analytics rules.
• Understand enterprise IT infrastructure, Windows and Linux, networking, third-party security tools, and their integration with Microsoft security systems.
• Experience analysing security data in Sentinel and Defender, identifying patterns, prioritising threats, and presenting recommendations.
• Understand attack vectors, MITRE ATT&CK, and adversary behaviours, and distinguish normal from abnormal activity.
• Have customer-facing communication experience and explain technical findings and security risks to technical and non-technical stakeholders.

Desirable qualifications and skills

• Microsoft certifications such as SC-200 or SC-100.
• CrowdStrike certifications such as CCFA or CCSA.
• Python, PowerShell, and RegEx skills.

Performance expectations