Senior Security Analyst

Salary: £50,000 - 60,000 per year

Requirements:

• Solid experience in a Security Operations or SOC environment
• Hands-on experience with SIEM, EDR and SOAR platforms
• Proven detection engineering and SIEM rule-tuning experience
• Strong grasp of MITRE ATT&CK and similar threat frameworks
• Experience automating processes with Python, Logic Apps or APIs
• Comfortable investigating incidents across cloud, identity and endpoint environments
• Experience with platforms like Microsoft Sentinel, Defender XDR, CrowdStrike or similar
• Knowledge of Azure/AWS security monitoring
• Understanding of ISO 27001 and Cyber Essentials
• CISSP or similar certification desirable but not essential

Responsibilities:

• Owning security incidents end-to-end, including triage, investigation, remediation and closure
• Running advanced investigations across SIEM, EDR and XDR platforms
• Designing and tuning SIEM detection rules to reduce false positives
• Mapping detection and response work against the MITRE ATT&CK framework
• Building automated security workflows using tools like Logic Apps, Python and APIs
• Proactively threat hunting using behavioural analytics and threat intelligence
• Monitoring and responding to security events across Azure, Microsoft 365 and AWS
• Investigating identity-based threats such as suspicious sign-ins and privilege escalation
• Supporting endpoint security, including EDR, AV and patching
• Acting as an escalation point for complex or high-risk incidents
• Supporting ISO 27001 and Cyber Essentials compliance
• Mentoring junior analysts and the wider service desk team

Technologies:

• AWS
• Azure
• Cloud
• Support
• Microsoft 365
• Python
• Security
• Office 365

More:

We are a well-established managed services organisation in Reading, offering a hybrid working arrangement for this Senior Security Analyst role. We are growing our SOC function and are looking for someone who enjoys hands-on detection and response, threat hunting, and improving the automation and effectiveness of our security operations. The role offers the opportunity to work across SIEM, EDR and XDR platforms, take ownership of incident response from start to finish, and support our compliance efforts while mentoring junior colleagues.

last updated 34 week of 2026