Security Analyst

TalentHawk; Glasgow; On-site; GBP 60,000 - 80,000; Full time

Job summary

TalentHawk is seeking an experienced Senior Security Operations Analyst in Glasgow to join a busy security team. This hands-on role focuses on monitoring, investigation, and incident response across a complex enterprise.

Responsibilities include managing alerts, performing detailed analyses, and supporting containment, remediation, and recovery efforts. You will work with MS Sentinel, Defender, and AWS security services daily to protect critical systems.

Qualifications

• 5 years in a Security Operations environment (SecOps).
• Experience in a 2nd/3rd line security operations role.
• AWS security services and cloud security operations experience.
• Hands-on experience with Microsoft Sentinel and Defender.
• Strong incident response, alert triage, and investigations knowledge.
• Experience analyzing logs and security telemetry from multiple sources.

Responsibilities

• Monitor, triage, and investigate security alerts and incidents.
• Analyse security events and suspicious activity in detail.
• Lead and support incident response activities including containment and recovery.
• Utilise Microsoft Sentinel and Defender to detect and respond to threats.
• Maintain security monitoring use cases and detection capabilities.
• Collaborate with infrastructure, cloud, and support teams to resolve issues.
• Produce investigation reports and recommendations to improve security posture.
• Contribute to continuous improvement of SecOps processes and procedures.
• Act as escalation point for complex security incidents.

Skills

SecOps experience

2nd/3rd line ops

AWS cloud security

Microsoft Sentinel

Microsoft Defender

Incident response

Log analysis

Stakeholder comms

Security frameworks

Certifications (e.g., SC-200, CISSP)

Education

Security certifications (SC-200, CISSP, etc.)

Tools

Microsoft Sentinel

Microsoft Defender

AWS Security Services

Job description

We are looking for an experienced Senior Security Operations Analyst to join a busy and fast-paced security team. This is a hands-on 2nd/3rd line SecOps role focused on monitoring, investigation, and response activities across a complex enterprise environment.

You'll be responsible for managing security alerts, conducting investigations, and supporting incident response activities, helping to protect critical systems and services. This role is ideal for someone who enjoys operational security and incident management rather than dedicated threat hunting.

Key Responsibilities

• Monitor, triage, and investigate security alerts and incidents.
• Perform detailed analysis of security events and suspicious activity.
• Lead and support incident response activities, including containment, remediation, and recovery.
• Utilise Microsoft Sentinel and Microsoft Defender to detect and respond to threats.
• Support and maintain security monitoring use cases and detection capabilities.
• Collaborate with infrastructure, cloud, and support teams to resolve security issues.
• Produce investigation reports and provide recommendations to improve security posture.
• Contribute to continuous improvement of security operations processes and procedures.
• Act as an escalation point for complex security incidents and investigations.

Required Skills & Experience

• Approximately 5 years' experience within a Security Operations (SecOps) environment.
• Strong experience working in a 2nd/3rd line security operations role.
• Experience with AWS security services and cloud security operations.
• Hands-on experience with Microsoft Sentinel.
• Hands-on experience with Microsoft Defender.
• Strong understanding of incident response, alert triage, and security investigations.
• Experience analysing logs, alerts, and security telemetry from multiple sources.
• Ability to prioritise workload effectively in a busy operational environment.
• Strong communication and stakeholder management skills.
• Knowledge of security frameworks and best practices.
• Relevant security certifications (e.g., SC-200, AWS Security Specialty, Security+, CISSP, GCIH).
• Experience working within regulated or security-sensitive environments.