Cyber Security Analyst

Thorntons Law LLP; Dundee; Hybrid; GBP 30,000 - 70,000; Full time

Benefits offered by this job

39 days annual leave

Pension scheme with salary exchange

Private medical insurance

Hybrid working

Job summary

Thorntons Law LLP is seeking a skilled cybersecurity professional to monitor, investigate and triage security events across the firm’s systems. You will help manage vulnerabilities, enforce secure configurations, and support incident response activities in a hybrid role based in Dundee or Edinburgh.

The position requires knowledge of Microsoft 365, Azure security, SIEM tools and identity protection, with a proactive, collaborative mindset to strengthen cyber resilience firm-wide.

Qualifications

• Strong analytical and problem-solving skills with attention to detail and organisation.
• Understanding of cyber security principles, controls and frameworks.
• Knowledge of vulnerability management, remediation and security best practice.
• Familiarity with Microsoft 365 and Azure security capabilities and products.
• Understanding identity and access management concepts including privileged access.
• Knowledge of networking, operating systems and cloud platforms.
• Excellent verbal and written communication with a customer/service focus.
• Proactive learner with interest in emerging threats and security tech.
• Collaborative with technology teams, suppliers and security partners.
• Curiosity, accountability and desire to improve security.

Responsibilities

• Monitor security alerts and events, perform initial investigation and triage.
• Conduct vulnerability assessments and support remediation activities.
• Maintain secure configurations across endpoints, servers and cloud services.
• Support security technologies including Microsoft Sentinel and identity protection.
• Assist with access reviews and privileged access monitoring.
• Analyse security data, produce reports and strengthen controls.
• Maintain procedures and security records, support audits and policy reviews.
• Support security awareness campaigns and guidance for colleagues.
• Work with IT and business teams to resolve security issues.

Skills

Analytical thinking

Problem solving

Attention to detail

Security awareness

Communication skills

Learning mindset

Team collaboration

Risk assessment

Tools

Microsoft Sentinel

Endpoint protection

Microsoft 365 security

Azure security

Job description

Salary: £30,000 - 70,000 per year

Requirements:

• Strong analytical and problem-solving skills, with excellent attention to detail, accuracy and organisation, and the ability to investigate security alerts and events, identify potential risks and make appropriate decisions about escalation.
• A good understanding of cyber security principles, controls and frameworks, with knowledge of vulnerability management, remediation and security best practice.
• Knowledge of Microsoft 365 and Azure security capabilities and products, with familiarity with security monitoring, SIEM and endpoint protection technologies.
• An understanding of identity and access management concepts, including access controls, privileged access and authentication technologies.
• A sound understanding of networking, operating systems and cloud platforms, with the ability to apply this knowledge when investigating security issues.
• Effective verbal and written communication skills, with the ability to explain security matters clearly to both technical and non-technical audiences, alongside a customer and service-focused approach and the ability to prioritise effectively in a fast-changing environment.
• A proactive approach to learning, with a willingness to stay up to date with emerging threats, attack techniques and security technologies and continually develop your cyber security knowledge.
• The ability to work collaboratively with technology teams, colleagues across the firm, suppliers and security partners to resolve issues, manage risk and support continuous improvement.
• Someone who brings curiosity, accountability, attention to detail and a genuine desire to help make the firm more secure.

Responsibilities:

• Monitor security alerts and events, carry out initial investigation and triage, elevate incidents where required, and support incident response activities including evidence gathering and post-incident reviews.
• Conduct vulnerability assessments, support remediation activities and monitor progress, help maintain secure configurations across endpoints, servers, cloud services and networks, and check that security controls are operating effectively.
• Support the day-to-day operation and administration of security technologies including Microsoft Sentinel, Microsoft 365 security capabilities, endpoint protection, email security, multi-factor authentication, conditional access and identity protection.
• Support access reviews, privileged access monitoring and other activities that help ensure appropriate and secure access to the firms systems and information.
• Analyse security data, produce reports and dashboards, identify trends and help strengthen security controls, monitoring capability and operational processes.
• Maintain accurate procedures, knowledge articles and security records, while supporting audits, compliance reviews, evidence gathering and policy and standards reviews.
• Support cyber security awareness campaigns and provide colleagues with practical guidance on security best practice and the safe use of technology.
• Work closely with infrastructure, service delivery, data and business teams, as well as suppliers and security partners, to resolve security issues and strengthen our overall cyber resilience.

Technologies:

• Azure
• Cloud
• Support
• Microsoft 365
• Security
• Office 365

More:

At Thorntons Law, we are a different kind of law firm where relationships with clients and colleagues really last. We protect our people, clients, information and technology by working across security monitoring, vulnerability management, security technology and incident response to help keep the firm safe from cyber threats and information security risks. This hybrid role is based in Dundee or Edinburgh, and we offer a wide range of benefits including 39 days annual leave, contributory pension scheme with salary exchange, private medical insurance, critical illness cover, income protection cover, group life assurance, exceptional family leave packages, assisted conception and IVF leave, health care cash plan, 24-hour wellbeing support, free legal fees for moving home and life planning, cycle to work scheme, gym discounts, retail discounts and hybrid working. We also support professional development through training, courses, specialist accreditations and business skills development, and we are committed to an inclusive workplace where everyone can thrive.