Cyber Security Analyst – Microsoft Security / IAM – Contract

Searchability; West of England; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

Searchability in Bristol is seeking an experienced Cyber Security Analyst to join the IT and Security function on a 3-month contract, Inside IR35. The role focuses on Identity and Access Management within the Microsoft ecosystem, leveraging Entra ID/Azure AD, Conditional Access, MFA and RBAC, with hands-on work in Microsoft Sentinel.

You will monitor security events, investigate incidents, write KQL queries, and collaborate with internal teams and third-party security providers to improve the

Qualifications

• Strong practical experience with Microsoft Identity and Security.
• Experience with Entra ID / Azure AD, Conditional Access, MFA and RBAC.
• Knowledge of Microsoft Sentinel and KQL queries.
• Ability to investigate security incidents and support remediation.

Responsibilities

• Support and improve Identity and Access Management across the organisation.
• Use Entra ID, MFA, Conditional Access and RBAC.
• Monitor with Microsoft Sentinel and investigate security events.
• Write and work with KQL queries.
• Investigate suspicious activity and emerging threats.
• Support vulnerability management and remediation.

Skills

Microsoft Entra ID

Azure AD

IAM

Conditional Access

MFA

RBAC

Microsoft Sentinel

KQL

Security incidents

Vulnerability management

Job description

Cyber Security Analyst – Microsoft Security / IAM

3-Month Contract | Inside IR35
Bristol / Hybrid – Ideally 1-2 days per week onsite
Microsoft Sentinel | Entra ID | IAM | Conditional Access | MFA | RBAC

We’re looking for an experienced Cyber Security Analyst to join a highly innovative organisation in Bristol on an initial 3-month contract.

You’ll join an established IT and Security function, helping to protect a complex technology environment and improve the organisation’s overall security posture.

The biggest focus for this role is Identity andamp; Access Management within the Microsoft ecosystem, so we’re looking for somebody with strong hands‑on knowledge of Entra ID / Azure AD, Conditional Access, MFA and RBAC, alongside experience working with Microsoft Sentinel.

What you’ll be doing

• Supporting and improving Identity andamp; Access Management across the organisation
• Working with Entra ID, MFA, Conditional Access and RBAC
• Using Microsoft Sentinel to monitor and investigate security events and incidents
• Writing and working with KQL queries
• Investigating suspicious activity, security incidents and emerging threats
• Supporting vulnerability management and remediation activity
• Working across the wider Microsoft security ecosystem
• Identifying opportunities to improve the organisation’s overall security posture
• Acting as a security escalation point for the wider IT team
• Working alongside internal teams and third-party security providers
• Supporting security projects, audits and compliance activity
• Producing clear recommendations following security investigations

What we’re looking for

The key requirement is strong practical experience across Microsoft Identity and Security.

Ideally you’ll have experience with:

• Microsoft Entra ID / Azure AD
• Identity andamp; Access Management (IAM)
• Conditional Access
• Multi-Factor Authentication (MFA)
• Role-Based Access Control (RBAC)
• Microsoft Sentinel
• KQL / custom SIEM queries
• Microsoft 365 / Microsoft security technologies
• Security incident investigation and remediation
• Vulnerability management
• Network and infrastructure security
• Windows and Linux environments

Knowledge of areas such as Microsoft Defender, PIM/PAM, MITRE ATTandamp;CK, ISO27001, NIST, Cyber Essentials Plus and Industrial/IoT security would also be useful, but we’re far more interested in your hands‑on experience than a long list of certifications.

The contract

This is an initial 3-month contract, Inside IR35.

The team would ideally like somebody who can spend one day per week onsite in Bristol, although fully remote working may be considered for an outstanding candidate.

You’ll need to be eligible to successfully complete BPSS clearance, and the successful candidate will go through this process before joining.

There is a one-stage interview process, with the successful candidate expected to be available to start towards the end of September.