Cyber Security Analyst

Nettitude Group; Maney; Hybrid; GBP 35,000 - 55,000; Full time

Job summary

A leading global assurance provider is seeking a Cyber Security Analyst to join their internal Security Operations team. This hybrid role involves monitoring and responding to security threats across networks, utilizing Microsoft security tools, and applying offensive-security strategies. Ideal candidates should possess relevant security certifications, strong analytical skills, and experience in security operations. You will be part of a dedicated team focused on driving innovative security solutions while contributing to the company's mission for a safer future.

Qualifications

• Experience operating and optimising Microsoft's AI-enhanced security tooling.
• Strong documentation discipline around procedures and technical processes.
• Ability to work independently and collaboratively in a high-trust environment.

Responsibilities

• Monitor and respond to threats across networks, servers, and cloud environments.
• Investigate incidents and apply offensive-security thinking to strengthen detection engineering.
• Develop and refine processes and ensure effective incident response during security incidents.

Skills

Microsoft Defender security tooling

Offensive-security thinking

Security operations

Incident investigation

Vulnerability analysis

Threat intelligence interpretation

Creativity in security

Attacker Tactics, Techniques, and Procedures (TTPs)

Education

Offensive security certifications (OSCP, eCPPT)

Tools

Microsoft Sentinel

Zscaler

EDR

CSPM

PAM

NGFW

Vulnerability management tools

Job description

Select how often (in days) to receive an alert: Create Alert

Job ID: 43336. Location: Birmingham : 1 Trinity Park : Bi. Position Category: Technology. Position Type: Employee Regular.

Cyber Security Analyst

We’re looking for a Cyber Security Analyst who’s excited about the future of AI‑assisted defence and wants to be part of an internal Security Operations team. You’ll join a progressive Information Security function, reporting directly to the Information Security Manager, and take a hands‑on role in monitoring and responding to threats across our networks, servers, endpoints, and cloud environments.

At LRQA, our philosophy is built around an offensive security mindset—understanding attacker behaviour, anticipating their moves, and using automation and AI‑powered insights to stay ahead. As part of our growing team, you’ll dive into real technical challenges, work with teammates who share a passion for security innovation, and help us push our capabilities forward.

NOTE: This role supports LRQA’s internal security team and is not part of the LRQA Nettitude Managed Services function.

What You’ll Do

• Operate and optimise LRQA’s AI‑enhanced Microsoft Defender security tooling, using machine‑learning insights and automated threat detection to identify, investigate, and respond to incidents.
• Apply offensive‑security thinking to analyse attacker TTPs and strengthen LRQA’s detection engineering.
• Continually refine SOC processes, using automation to reduce noise and amplify analyst impact.
• Act as a key point of contact during security incidents, helping shape remediation strategies.
• Experiment with new technologies, leverage AI‑driven capabilities, and contribute to a culture of continual learning and innovation.
• Hands-on experience with the Microsoft Defender security stack—alert triage, incident investigation, vulnerability analysis, and tuning detections for maximum signal‑to‑noise reduction.
• Background in penetration testing or security operations, with strong knowledge of attack paths against Windows AD/AAD environments.
• Strong documentation discipline, especially around procedures and technical processes.
• Calm, structured approach under pressure—particularly during live security incidents.
• A growth mindset, curiosity about AI/automation, and willingness to learn unfamiliar tools.
• Passion for optimising existing security tooling rather than relying on unnecessary products.
• Good understanding of attacker Tactics, Techniques, and Procedures (TTPs) and the ability to interpret threat intelligence.
• Ability to work independently as well as collaboratively within a high‑trust, high‑autonomy team.
• Creativity and commitment to reducing security risk—using both human intuition and automated intelligence.
• Experience with Microsoft Sentinel, Zscaler, or other AI‑enabled cloud security technologies.
• Offensive security certifications such as OSCP, eCPPT, or hands‑on experience via HackTheBox, TryHackMe, etc.
• Familiarity with modern tooling such as EDR, CSPM, PAM, NGFW, vulnerability management, and email security platforms.

Location

Hybrid role based in the UK, combining home working with office-based collaboration, workshops, and team sessions. Applicants must be UK residents.

Working Pattern

Shift-based work across early, mid, and late patterns (7.5 hours per day) to provide extended working day coverage.

Pre-Employment Checks

If you are successful in securing a role with us, we will carry out pre-employment checks in accordance with what is allowed under local law.

These checks will include, (as permitted): right to work, identification, verification of employment history, education, and criminal records.

We may involve the third-party supplier to run the background checks as needed and your data will be retained for a period as needed for the purpose of employing you.

Your data will be stored in accordance with all relevant privacy legislation.

Please contact us if you have any questions or concerns.

Diversity and Inclusion at LRQA

We are on a mission to be the place where we all want to work and we are passionate about embracing different perspectives because we understand the value this brings to our business, our clients and each other. We are all about creating a safer and more sustainable future and our inclusive culture is right at the heart of our business.

Together our employees make our communities better and we want you to be part of our diverse team!

LRQA is a leading global assurance provider. The integrity and expertise we bring to our partnership with clients support their journey to a safer, more secure and more sustainable future. (Group entities ).