Cyber Security Analyst

PinkWorm Recruitment; Greater London; Hybrid; GBP 35,000 - 40,000; Full time

Job summary

PinkWorm Recruitment is seeking a hands-on Cyber Security Analyst in London. You will monitor, investigate and respond to threats, working with internal teams and SOC providers to strengthen controls and security posture.

The role emphasizes ownership, proactive problem solving and clear communication with technical and non-technical stakeholders. Microsoft Defender, Entra ID and MS 365 security skills are essential.

Qualifications

• Experience investigating cyber security incidents, alerts and threats.
• Knowledge of MS 365 security technologies (Defender, Entra ID, Intune).
• Experience with email security and phishing investigations.
• Understanding of monitoring, detection and incident management.

Responsibilities

• Monitor, investigate and respond to security alerts and incidents.
• Identify threats, gather evidence and support remediation.
• Administer security platforms (Defender, Entra ID, Intune, Exchange).
• Collaborate with SOC providers for threat monitoring and response.
• Support vulnerability remediation and security control improvements.
• Promote phishing awareness and security best practices.

Skills

Threat detection

Incident response

Security monitoring

Analytical thinking

Communication

Education

CompTIA Security+

Microsoft SC-200

Tools

Microsoft Defender

Entra ID

Intune

Exchange

Purview

Microsoft Sentinel

KQL

Job description

Cyber Security Analyst | Location: London | Hybrid - London | Perm | £35,000 - £40,000 + benefits

This is a great opportunity for a hands‑on Cyber Security professional who enjoys investigating threats, solving problems and making a real impact on an organisation's security.

You'll work closely with internal technology teams, business stakeholders and SOC providers to identify, investigate and respond to security incidents, strengthen security controls and continuously improve the organisation's cyber security posture.

We're looking for someone who is technically confident, proactive and comfortable taking ownership rather than simply escalating issues.

The Role:

• Security Monitoring & Incident Response: Monitor, investigate and respond to cyber security alerts, suspicious activity, phishing attacks and security incidents.
• Threat Detection & Investigation: Identify genuine threats, gather evidence, support containment and ensure appropriate remediation or escalation.
• Microsoft Security Technologies: Administer and support Microsoft Defender, Entra ID, Intune, Exchange, Purview and email security platforms.
• SOC Collaboration: Work closely with third‑party SOC providers to support effective threat monitoring, detection and incident response.
• Vulnerability Management: Support vulnerability remediation, exposure management and improvements to security controls.
• Security Awareness: Help colleagues understand cyber risks, promote best practice and support phishing awareness initiatives.
• Continuous Improvement: Identify opportunities to strengthen security processes, improve detection capabilities and enhance the overall security environment.
  

About you:

You'll ideally have experience working as a Cyber Security Analyst, SOC Analyst, Security Operations Analyst or in a similar hands‑on cyber security role.

• Proven experience investigating cyber security incidents, alerts and potential threats.
• Good working knowledge of Microsoft 365 security technologies, particularly Microsoft Defender, Entra ID and Intune.
• Experience with email security, phishing investigations and incident response.
• Understanding of security monitoring, threat detection and incident management processes.
• Strong analytical and problem-solving skills, with the ability to investigate issues through to resolution.
• Good communication skills and the confidence to engage with technical and non-technical stakeholders.
• Microsoft Sentinel and KQL querying.
• Vulnerability and exposure management.
• Working with external or managed SOC providers.
• CompTIA Security+, Microsoft SC-200 or equivalent security certifications.
  

We're looking for someone who is naturally curious, enjoys getting to the root cause of security issues and takes pride in keeping systems and data secure.

You'll be comfortable working in a busy environment, managing competing priorities and communicating technical risks in a clear, practical way.

Most importantly, you'll bring a proactive attitude, strong attention to detail and a genuine interest in staying ahead of emerging cyber threats.