Security Analyst

Doherty; Greater London; Hybrid; GBP 32,000 - 42,000; Full time

Benefits offered by this job

Basic salary + performance bonus

34 days annual leave

Private medical insurance

Employee Assistance Programme

Company pension scheme

Training and development

Job summary

Doherty Associates (DA) is seeking a Security Analyst to join our Managed Services team in a role based in our office. You will triage security events, perform incident response, and help keep client environments aligned with security baselines.

You’ll work with 2nd/3rd line engineers, deliver regular vulnerability management, patching and training, and produce clear reports for customers to drive improvements. Expect on-call duties as required.

Qualifications

• GCSEs including English and Maths are required.
• Relevant IT or Cyber Security qualification or equivalent experience.
• Experience in an MSP or outsourced IT services environment, ideally in IT Service Desk or Cyber Security.

Responsibilities

• Act as a first responder on security tickets, triaging alerts and incidents.
• Log, classify, and prioritise tickets and keep detailed notes in tickets using ConnectWise Manage.
• Remediate security issues and coordinate with 2nd/3rd line engineers for resolutions.
• Conduct vulnerability management activities, patches, and configuration monitoring.
• Deliver security awareness training and phishing simulations, and provide actionable client reports.

Skills

Empathy

Attention to detail

Strong communication

Team player

Willing to on-call

Proactive

Education

GCSEs including English and Maths

Microsoft SC-900 (Security Fundamentals)

CompTIA Security+

ISC2 Certified in Cybersecurity (CC)

Tools

ConnectWise Manage

Microsoft 365

Job description

Doherty Associates (DA) have delivered IT solutions for over 30 years to world-renowned, international clients, primarily within the professional and financial services sectors. We are a Microsoft Solutions Partner with multiple designations, hold a Tier 1 Microsoft CSP relationship, and operate to ISO27001 & ISO9001 standards.

Our services are built on the Microsoft cloud ecosystem and focused on delivering secure, high-quality, outcome-driven solutions for our clients.Our customers rely on us to bring specialist expertise and innovation across cloud solutions, hybrid working, modern workplace, data and BI, cyber security, governance and compliance. We have built a reputation as a company that keeps its promises and delivers quality.

About the role

This role is office based, Monday to Friday, between the hours 10:30 and 19:00.

Reporting to the Head of Managed Services, the Security Analyst is part of our Managed Services department and is responsible for the day-to-day delivery of our security services to DA customers. You will act as a first responder on security tickets, triaging and resolving alerts, incidents and requests, and remediating issues to bring customer environments in line with our defined security baselines.

Alongside incident work, you will deliver the regular activities that keep our customers secure and informed – vulnerability scanning and remediation, patching and configuration compliance monitoring, security awareness training and phishing simulations – and produce clear, structured reports that translate technical findings into prioritised, actionable recommendations for customers.

This role will best suit someone early in their cyber security career who is keen to learn, with a solid grounding in Microsoft 365 and a genuine interest in security. You will work closely with our 2nd and 3rd Line Security Engineers, who will support your development and to whom you will escalate more complex work to. While technical ability matters, equally important are strong customer-facing attributes – active listening, empathy, attention to detail and clear communication – as you will regularly engage directly with customers.

You will form part of the security escalation path, which may include overtime, changes to shift pattern and/or an on-call cover.

Responsibilities

Security Ticket Management & Incident Response

• Act as a first responder on security tickets; responding promptly to alerts, incidents and requests logged by customers
• Assess, classify and prioritise incoming security tickets in line with internal SLAs, escalating where appropriate so that incidents progress without delay
• Accurately log and efficiently progress tickets within the ConnectWise Manage platform
• Keep detailed notes and time entries within tickets, so that anyone reading a ticket for the first time has all the information required to progress it
  

Technical Resolution & Remediation

• Resolve security tickets within your technical ability and collaborate with the wider team (2nd / 3rd Line Security Engineers and other specialists) to reach timely resolutions
• Remediate security issues to bring customer environments in line with defined security baselines, escalating to senior engineers where remediation is beyond your technical ability
• Support patching compliance and security configuration monitoring, investigating and remediating issues and escalating root‑cause findings to senior engineers where required
  
• Form part of the security escalation path, which may include overtime, changes to shift pattern or on‑call cover
  

Customer Service & Communication

• Deliver outstanding customer service across all forms of communication
  • As part of a wider team, create tickets or route calls through to other engineers as required
  • Ensure accurate, consistent, clear and understandable communication via tickets, email and over the phone

Security Operations & Service Activities

• Carry out regular Vulnerability Management Service activities, such as running scans, producing reports and performing remediation activities

Training, Awareness & Documentation

• Manage the delivery of Security Awareness Training and Phishing Simulations using our online platform
• Follow existing procedures and act as a champion of security documentation on the desk, amending existing guides and creating new ones where applicable
• Produce clear, structured reports outlining risks, findings, and recommended improvements
• Record findings in client risk logs and present them to customers as required, providing actionable, prioritised remediation guidance
  
• Support ongoing improvement of customers' security posture through regular reviews, reassessments and follow‑up of outstanding remediation actions

Administration

• Accurately complete daily timesheets and expenses reporting requirements

Team Contribution

• Support training and onboarding of junior and new engineers in the DA office
• Promote an inclusive, collaborative and respectful working environment, leading by example

Qualifications, experience and skills

• GCSEs (or equivalent) including English and Mathematics.
• Relevant IT or Cyber Security qualification, or equivalent industry experience.
• Previous experience working in an MSP or other outsourced IT services environment, ideally in an IT Service Desk, Technical Support or Cyber Security role.

At least one of the following, or actively working towards achieving one:

• Microsoft SC-900 (Security, Compliance & Identity Fundamentals)
• CompTIA Security+
• ISC2 Certified in Cybersecurity (CC)
• Experience using ticketing systems and following SLA-driven processes.
• Experience supporting Microsoft 365 environments.

Understanding of:

• Microsoft 365 security fundamentals
• Email security threats (phishing, malware, spoofing)
• Endpoint security fundamentals
• Vulnerability management principles
• Security patching and update management
• Identity and access management basics
• Ability to investigate and triage security alerts and incidents.
• Ability to follow documented incident response procedures.
• Strong written and verbal communication skills.
• Ability to document findings, actions and recommendations clearly.
• Strong organisational skills and attention to detail.
• Ability to prioritise workloads and escalate appropriately.
• Willingness to participate in on-call or extended‑hours support where required.
• Empathy – ability to listen to understand and support.
• Adaptable – being able to adjust to changing workloads and priorities.
• High sense of urgency and accountability.
• Proactive and self‑motivated.
• Team player who can foster an inclusive and collaborative working environment.
• Keen to learn and share knowledge.

What we offer in return

• Basic salary plus performance bonus
• 34 days of annual leave (incl. 8 UK bank holidays and a day off on your birthday)
• Enhanced family‑friendly benefit schemes including company sick pay
• Sponsored training and development and where applicable, a technical exams incentive scheme, including BTL1
• Private medical insurance and Employee Assistance Programme
• Income protection and life insurance
• Company Pension scheme

DISCLAIMER - We use AI notetaking tools to transcribe interviews for internal review. By proceeding, you consent to this.

Microsoft 365 security, MFA, End point, Microsoft Defender