3rd Line Security Analyst - Hybrid - Reading Sentinel Defender XDR

Global Technology Solutions Ltd; Reading; Hybrid; GBP 50,000 - 60,000; Full time

Benefits offered by this job

25 days holiday

holiday trading

volunteer day

pension

life assurance

employee assistance

mentoring

eye care

flu vaccination

Costco eligibility

Job summary

Global Technology Solutions Ltd in Reading is seeking a 3rd Line Security Analyst to strengthen security operations, lead investigations and enhance detection and response capabilities.

You will work hybrid, three days in office and two at home, and manage Sentinel, Defender XDR, CrowdStrike, Entra ID, and Cloud security. The role requires hands-on SOC/engineering experience with mentoring responsibilities.

Qualifications

• Substantial SOC, cyber operations or security engineering experience.
• Hands-on Sentinel, Defender XDR and CrowdStrike expertise.
• Incident response, malware analysis, forensics and threat hunting.
• Advanced KQL; PowerShell and/or Python automation.
• Entra ID, Conditional Access, Intune and Microsoft 365 security.
• Cloud and networking knowledge; MITRE ATT&CK, NIST and SANS frameworks.
• CISSP desirable.

Responsibilities

• Senior technical authority in Security Operations, improving security engineering, detection and response while supporting the wider team.
• Lead serious incidents, forensic investigations and root cause analysis.
• Develop detections, automation and orchestration; conduct proactive threat hunting.
• Engineer Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune and Darktrace.
• Support Microsoft 365, Azure, AWS, identity and endpoint security.
• Maintain documentation, support compliance and mentor colleagues.

Skills

SOC/IR experience

Sentinel expertise

Defender XDR knowledge

CrowdStrike Falcon

Entra ID / Intune

PowerShell / Python

MITRE/NIST/SANS

Education

CISSP certification

Tools

Sentinel

Defender XDR

CrowdStrike Falcon

Entra ID

Intune

Darktrace

Microsoft 365 security

Azure

AWS

Job description

3rd Line Security Analyst

Location: Reading Hybrid, three office days and two home days (Month 1 full time in the office)

Salary: GBP50,000 – GBP60,000

Role and responsibilities

• Senior technical authority in Security Operations, improving security engineering, detection and response while supporting the wider team.
• Lead serious incidents, forensic investigations and root cause analysis.
• Develop detections, automation and orchestration; conduct proactive threat hunting.
• Engineer Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune and Darktrace.
• Support Microsoft 365, Azure, AWS, identity and endpoint security.
• Maintain documentation, support compliance and mentor colleagues.

Experience and qualifications

• Substantial SOC, cyber operations or security engineering experience.
• Hands–on Sentinel, Defender XDR and CrowdStrike expertise.
• Incident response, malware analysis, forensics and threat hunting.
• Advanced KQL; PowerShell and/or Python automation.
• Entra ID, Conditional Access, Intune and Microsoft 365 security.
• Cloud and networking knowledge; MITRE ATT&CK, NIST and SANS frameworks.
• CISSP desirable.

Benefits

• 25 days holiday, holiday trading, volunteer day, pension, life assurance, employee assistance, mentoring, eye care, flu vaccination and Costco eligibility.