Remote 2nd-Line SOC Analyst (Microsoft Security)

Reed Technology; Newcastle upon Tyne; Remote; GBP 42,000 - 62,000; Full time

Benefits offered by this job

Remote work

Office collaboration

Job summary

Reed Technology is seeking a SOC Analyst to join a growing Security Operations team in Newcastle. You will work at 2nd Line, investigating security incidents through to resolution and monitoring SIEM alerts in a Microsoft security environment.

The role offers hands-on exposure to Defender, Sentinel and Entra, with opportunities to pro-actively threat hunt and develop technical skills while supporting vulnerability remediation and process improvements within the SOC.

Qualifications

• Experience working within a SOC / Security Operations environment.
• Exposure to Microsoft Sentinel and/or Microsoft Defender.
• A good understanding of security incident investigation and response.
• Knowledge of Windows environments and general networking/security principles.
• Exposure to KQL would be beneficial.
• A genuine desire to develop technically and progress within cyber security.

Responsibilities

• Investigate and respond to security incidents through to resolution.
• Monitor customer environments and investigate SIEM alerts.
• Proactively threat hunt and identify potential security risks.
• Support vulnerability assessment and remediation.
• Work across the Microsoft security stack, including Sentinel, Defender and Entra.
• Use KQL and PowerShell as part of investigations and automation.
• Act as an escalation point for more junior analysts.
• Contribute to improvements across SOC processes and detection capabilities.
• Communicate with customers and internal teams around security incidents.

Skills

SOC operations

KQL

PowerShell

Incident response

Tools

Microsoft Sentinel

Microsoft Defender

Entra

Job description

Reed Technology is seeking a SOC Analyst to join a growing Security Operations team in Newcastle. You will work at 2nd Line, investigating security incidents through to resolution and monitoring SIEM alerts in a Microsoft security environment.

The role offers hands-on exposure to Defender, Sentinel and Entra, with opportunities to pro-actively threat hunt and develop technical skills while supporting vulnerability remediation and process improvements within the SOC.