Cyber Security Analyst

Planet Recruitment; Abingdon; On-site; GBP 37,000 - 45,000; Full time

Benefits offered by this job

25+ Days Holiday (rising)

Flexible working

Bupa Cash Plan

Electric Vehicle Scheme

Cycle Scheme

Discounted Gym Membership

Paid Charity Day

Car Parking

Job summary

Planet Recruitment is seeking a Cyber Security Analyst in Abingdon to join a managed security service provider. You will operate security services across internal and client environments, investigate threats, respond to escalations, and help turn findings into practical remediation actions.

The role demands hands-on incident response, vulnerability management and Microsoft 365 security work, with a focus on continuous improvement, documentation and clear risk communication to Service Desk,

Qualifications

• Experience working in an MSP or multi-client support environment.
• Proficient with security platforms including Microsoft 365 and Sophos.
• Experience investigating security incidents, phishing, malware or account compromise.
• Experience supporting security hardening, vulnerability management and remediation tracking.
• Strong troubleshooting across user, endpoint, identity, email, cloud and client configuration.
• Ability to communicate technical risks clearly to Service Desk, Infrastructure, Account Managers and clients.
• Strong documentation skills, including evidence gathering and remediation records.
• Curious and proactive in investigating unclear security issues and following through to outcomes.
• Ability to drive security improvements and remediation with practical actions.

Responsibilities

• Monitor and investigate alerts across Microsoft 365, Sophos and other platforms used across internal and client environments.
• Investigate security incidents and support containment, remediation and recovery actions.
• Escalate significant incidents and support Major Incident response activity.
• Maintain security documentation and evidence.
• Contribute to continuous improvement of the MSP's internal security posture through remediation support and controls.
• Review vulnerability scan results and validate findings, tracking remediation with Service Desk and Infrastructure teams.
• Produce regular vulnerability posture reporting.
• Review Microsoft Secure Score, Defender, Entra ID, Intune and Conditional Access recommendations.
• Support implementation of Microsoft 365 security improvements across internal and client environments.
• Investigate 365 security alerts, identity risks and config issues.
• Assist with MFA, Conditional Access, Defender, Intune and endpoint security initiatives.
• Experience working with security platforms to investigate alerts, respond to issues and improve posture.
• Strong communication of risks to stakeholders.
• Documentation of investigations, evidence gathering and remediation records.
• Operational ownership and timely delivery of security improvements.
• Ability to prioritise and manage multiple security tasks under pressure.

Skills

Threat Investigation

Security Improvements

Escalation Judgement

Documentation

Service Desk Enablement

Client Advisory

Operational Ownership

Prioritisation Under Pressure

Pragmatic Security Mindset

Continuous Learning

Job description

Position: Cyber Security Analyst

Location: Abingdon

Salary: £37k-45k

Benefits

• 25+ Days Holiday and rising (plus bank holidays)
• Flexible working (WFH incentives)
• Bupa Cash Plan
• Electric Vehicle Scheme
• Cycle Scheme
• Discounted Gym Membership
• Paid Charity Day
• Car Parking

Overview

The Security Administrator is responsible for the hands‑on operation and improvement of the MSP's security services across internal and client environments. The role investigates threats, responds to security escalations, improves security posture, supports tenant hardening and helps translate findings into practical remediation actions.The role acts as a technical security escalation point for Service Desk, Infrastructure, Account Managers and clients, supporting QSRs, vulnerability management, exception handling and security improvement activity.

Key Responsibilities

Security Operations

• Monitor and investigate alerts across Microsoft 365, Sophos and other security platforms used across internal and client environments.
• Investigate security incidents
• Support containment, remediation and recovery activity for security incidents.
• Escalate significant incidents
• Support Major Incident response activity.
• Maintain security documentations.
• Contribute to continuous improvement of the MSP's internal security posture through remediation support, control implementation and evidence gathering.

Vulnerability & Patch Management

• Review vulnerability scan results.
• Validate findings and identify false positives.
• Track remediation activities.
• Work with Service Desk and Infrastructure teams to reduce risk exposure.
• Produce regular vulnerability posture reporting.

Microsoft 365 Security

• Review Microsoft Secure Score, Defender, Entra ID, Intune and Conditional Access recommendations.
• Support implementation of Microsoft 365 security improvements across internal and client environments.
• Investigate Microsoft 365 security alerts, identity risks and configuration issues.
• Assist with MFA, Conditional Access, Defender, Intune and endpoint security initiatives.

Key Skills & Attributes

• Threat Investigation
• Security Improvement Delivery
• Escalation Judgement
• Evidence & Documentation Discipline
• Service Desk Enablement.
• Client Advisory Support
• Operational Ownership
• Prioritisation Under Pressure
• Pragmatic Security Mindset
• Continuous Learning

Person Specification

• Experience working in an MSP, multi-client technical support, infrastructure or security administrator role.
• Practical experience using security platforms to investigate alerts, respond to issues and improve security posture, including Microsoft 365 security tooling and Sophos.
• Experience investigating security incidents, suspicious activity, phishing, malware, account compromise or similar security scenarios.
• Experience supporting security hardening, configuration improvement, vulnerability management, patching, remediation tracking or control implementation.
• Strong troubleshooting skills across user, endpoint, identity, email, cloud and client configuration scenarios.
• Strong curiosity and initiative, with the ability to investigate unclear security issues, pull on technical threads and follow them through to practical outcomes.
• Ability to communicate technical risks clearly to Service Desk, Infrastructure, Account Managers and clients.
• Strong documentation skills, including evidence gathering, investigation notes, exceptions, remediation records and review dates.

Planet Recruitment is an Equal Opportunities Employer.

Please note that no terminology in this advert is intended to discriminate on the grounds of a person's gender, marital status, race, religion, colour, age, disability or sexual orientation. Every candidate will be assessed only in accordance with their merits, qualifications and abilities to perform the duties of the position.