Hybrid 3rd Line Security Analyst: Incident Response Lead

Global Technology Solutions Ltd; Reading; Hybrid; GBP 50,000 - 60,000; Full time

Benefits offered by this job

25 days holiday

Pension

Life assurance

Employee assistance

Mentoring

Eye care

Flu vaccination

Costco eligibility

Job summary

Global Technology Solutions Ltd in Reading is seeking a 3rd Line Security Analyst to provide senior technical authority in Security Operations, improving security engineering, detection and response while supporting the wider team.

You will lead serious incidents, conduct forensic investigations and root cause analysis, develop detections and automation, and perform proactive threat hunting across Sentinel, Defender XDR, CrowdStrike and cloud platforms.

Qualifications

• Substantial SOC, cyber operations or security engineering experience.
• Hands-on Sentinel, Defender XDR and CrowdStrike expertise.
• Incident response, malware analysis, forensics and threat hunting.
• Advanced KQL; PowerShell and/or Python automation.
• Entra ID, Conditional Access, Intune and Microsoft 365 security.
• Cloud and networking knowledge; MITRE ATT&CK, NIST and SANS frameworks.
• CISSP desirable.

Responsibilities

• Senior technical authority in Security Operations, improving security engineering, detection and response while supporting the wider team.
• Lead serious incidents, forensic investigations and root cause analysis.
• Develop detections, automation and orchestration; conduct proactive threat hunting.
• Engineer Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune and Darktrace.
• Support Microsoft 365, Azure, AWS, identity and endpoint security.
• Maintain documentation, support compliance and mentor colleagues.

Skills

Sentinel

Defender XDR

CrowdStrike

KQL

PowerShell

Python

Azure

AWS

Entra ID

Intune

Microsoft 365 security

Darktrace

Education

CISSP

Tools

Sentinel

Defender XDR

CrowdStrike Falcon

Entra ID

Intune

Darktrace

Microsoft 365 security

Job description

Global Technology Solutions Ltd in Reading is seeking a 3rd Line Security Analyst to provide senior technical authority in Security Operations, improving security engineering, detection and response while supporting the wider team.

You will lead serious incidents, conduct forensic investigations and root cause analysis, develop detections and automation, and perform proactive threat hunting across Sentinel, Defender XDR, CrowdStrike and cloud platforms.