Cyber Security Analyst - Microsoft Security / IAM - Contract

Searchability; West of England; Hybrid; GBP 69,000 - 96,000; Full time

Job summary

Searchability is seeking an experienced Cyber Security Analyst focused on Identity & Access Management within the Microsoft security stack. The role is a 3-month contract Inside IR35 in Bristol with hybrid onsite presence and BPSS clearance required.

You will work with Entra ID/Azure AD, Conditional Access, MFA and RBAC, using Microsoft Sentinel and KQL to monitor, investigate and respond to security events while collaborating with internal teams and external providers.

Qualifications

• Hands-on experience with Microsoft Identity and Security in enterprise environments.
• Practical knowledge of Entra ID / Azure AD, Conditional Access and MFA.
• Experience using Microsoft Sentinel and writing KQL queries.

Responsibilities

• Support and improve Identity & Access Management across the organisation.
• Work with Entra ID, MFA, Conditional Access and RBAC.
• Use Microsoft Sentinel to monitor security events and incidents.
• Write and work with KQL queries.
• Investigate suspicious activity and security incidents.
• Support vulnerability management and remediation activities.
• Collaborate within the Microsoft security ecosystem.
• Identify opportunities to improve overall security posture.
• Act as a security escalation point for IT teams.
• Work with internal teams and third-party security providers.
• Support security projects, audits and compliance activities.
• Produce clear recommendations after investigations.

Skills

Entra ID / Azure AD

IAM (Identity & Access Management)

Conditional Access

MFA

RBAC

Microsoft Sentinel

KQL / SIEM queries

Microsoft 365 / security tech

Security incident investigation

Vulnerability management

Network & infrastructure security

Windows & Linux environments

Tools

Microsoft Entra ID / Azure AD

Microsoft Sentinel

KQL

Job description

Cyber Security Analyst - Microsoft Security / IAM

3-Month Contract Inside IR35
Bristol / Hybrid - Ideally 1-2 days per week onsite
Microsoft Sentinel Entra ID IAM Conditional Access MFA RBAC

We're looking for an experienced Cyber Security Analyst to join a highly innovative organisation in Bristol on an initial 3-month contract.

You'll join an established IT and Security function, helping to protect a complex technology environment and improve the organisation's overall security posture.

The biggest focus for this role is Identity & Access Management within the Microsoft ecosystem, so we're looking for somebody with strong hands‑on knowledge of Entra ID / Azure AD, Conditional Access, MFA and RBAC, alongside experience working with Microsoft Sentinel.

What you'll be doing

• Supporting and improving Identity & Access Management across the organisation
• Working with Entra ID, MFA, Conditional Access and RBAC
• Using Microsoft Sentinel to monitor and investigate security events and incidents
• Writing and working with KQL queries
• Investigating suspicious activity, security incidents and emerging threats
• Supporting vulnerability management and remediation activity
• Working across the wider Microsoft security ecosystem
• Identifying opportunities to improve the organisation's overall security posture
• Acting as a security escalation point for the wider IT team
• Working alongside internal teams and third‑party security providers
• Supporting security projects, audits and compliance activity
• Producing clear recommendations following security investigations

What we're looking for

The key requirement is strong practical experience across Microsoft Identity and Security.

Ideally you'll have experience with:

• Microsoft Entra ID / Azure AD
• Identity & Access Management (IAM)
• Conditional Access
• Multi‑Factor Authentication (MFA)
• Role‑Based Access Control (RBAC)
• Microsoft Sentinel
• KQL / custom SIEM queries
• Microsoft 365 / Microsoft security technologies
• Security incident investigation and remediation
• Vulnerability management
• Network and infrastructure security
• Windows and Linux environments

Knowledge of areas such as Microsoft Defender, PIM/PAM, MITRE ATT&CK, ISO27001, NIST, Cyber Essentials Plus and Industrial/IoT security would also be useful, but we're far more interested in your hands‑on experience than a long list of certifications.

The contract

This is an initial 3-month contract, Inside IR35.

The team would ideally like somebody who can spend one day per week onsite in Bristol, although fully remote working may be considered for an outstanding candidate.

You'll need to be eligible to successfully complete BPSS clearance, and the successful candidate will go through this process before joining.

There is a one‑stage interview process, with the successful candidate expected to be available to start towards the end of September.