Security Operations Analyst

The Role ​

We are looking for a Security Operations Analyst to join our Security Operations Team and help protect the organisations that depend on us. You will work at the frontline of our managed security service, monitoring customer environments, investigating security alerts and helping ensure that genuine threats are identified and escalated quickly and accurately. ​

This is a hands-on opportunity for someone who wants to build a career in cybersecurity while gaining practical exposure to security tools, incident handling and security automation. ​

The Team ​

Our Security Operations Team brings together analysts, engineers and security specialists who work collaboratively to protect customers across different industries. ​

You will learn from experienced security professionals, contribute to real investigations and play an important part in delivering a consistent and trusted managed security service. We encourage curiosity, continuous learning and open communication, particularly when responding to complex or time-sensitive incidents. ​

What Does the Role Entail? ​

As a Security Operations Analyst, you will be part of the first line of defence across our managed security customers. ​

You will monitor incoming alerts, separate genuine threats from noise and perform initial investigations using approved runbooks and security tools. When an alert requires further action, you will prepare a clear, evidence-based escalation so that our Security Engineers can continue the investigation without repeating work. ​

You will also help maintain accurate incident records, improve SOC documentation and identify opportunities to reduce repetitive work through automation and AI-assisted security operations. ​

What’s In It for You? ​

• Practical experience within a growing managed Security Operations Centre. ​
• Hands-on exposure to security tools from leading security vendors. ​
• The opportunity to investigate real security events across varied customer environments. ​
• Coaching and knowledge-sharing from experienced Security Engineers and security specialists. ​
• Support for professional development, training and relevant industry certifications. ​
• Exposure to security automation, AI-assisted investigation and modern SOC operating practices. ​
• A collaborative environment that encourages new ideas and continuous improvement. ​
• A clear foundation for progressing into incident response, security engineering, threat hunting or security automation. ​

What You’ll Do ​

• Monitor security alerts and incidents across customer environments. ​
• Triage alerts and determine whether they represent true positives, benign activity or false positives. ​
• Assign an appropriate initial severity and classification in line with approved runbooks. ​
• Enrich alerts using user, device, sign-in, mailbox, IP address, domain and file-hash information. ​
• Use predefined KQL queries and Defender advanced hunting templates to establish the initial scope of suspicious activity. ​
• Correlate related alerts to provide a clearer view of an incident and avoid duplicate handling. ​
• Escalate confirmed or suspected incidents with a complete handover covering the timeline, evidence, affected entities, actions taken and outstanding questions. ​
• Notify customer security teams through the agreed communication and escalation channels. ​
• Carry out pre-authorised containment actions when permitted by the customer’s agreed response model. ​
• Review AI-generated security summaries, verdicts and recommendations before relying on them. ​
• Maintain accurate, complete and auditable incident records from detection through to closure. ​
• Monitor the health of security data connectors, log ingestion and automation rules. ​
• Contribute to SOC runbooks, investigation guidance, customer-specific documentation and post-incident reviews. ​
• Support service reporting by providing accurate information on alert volumes, severity, response times and service-level performance. ​
• Identify recurring alerts and repetitive activities that could be improved through detection tuning, Logic Apps or AI-assisted triage. ​
• Support the onboarding of managed security customers by validating alert visibility, data sources, contacts and escalation paths. ​

What You’ll Need ​

• A diploma in computer science, cybersecurity or another ICT-related discipline. ​
• A genuine interest in cybersecurity and a commitment to continuous learning. ​
• A willingness to develop your query and investigation skills, learn to interpret security alerts and logs, and follow procedures accurately.​
• Interest in understanding of common cyber threats, including phishing, credential theft, malware and business email compromise. ​
• Clear written and verbal communication skills, particularly when documenting investigations and preparing escalations. ​
• The ability to remain calm, methodical and focused when handling urgent security events. ​
• A strong sense of integrity and discretion when working with sensitive customer information. ​
• Good organisation, attention to detail and ownership of work through to a documented outcome. ​
• Previous experience in IT support, systems administration or security operations would be an advantage, but is not essential.​

Benefits You’ll Enjoy ​

• Career growth and personal development support ​
• Study leave ​
• Health insurance ​
• Mobile subscription ​
• Hybrid work ​
• Regular team events and social activities ​
• Parking benefit by rotation ​
• Relocation package, including relocation assistance​​

The Person We’re Looking For ​

You do not need to know everything on your first day. What matters is that you are curious, dependable and willing to learn. ​

You enjoy working through evidence, asking the right questions and understanding what happened rather than simply closing an alert. You take ownership of your work, communicate clearly and know when to escalate. Most importantly, you want to develop into a capable cybersecurity professional within a team that will support and challenge you. ​

Personnel Security Clearance requirement ​