Security Analyst

Doherty Associates; Greater London; On-site; GBP 30,000 - 42,000; Full time

Benefits offered by this job

34 days annual leave

Private medical insurance

Company Pension

Sponsoring training and development

Job summary

Doherty Associates in London (Holborn) is seeking a Security Analyst to triage security tickets, manage incidents and deliver remediation in collaboration with 2nd/3rd line engineers.

The role emphasizes customer communication, vulnerability management, phishing simulations and security reporting. Office-based hours are Monday–Friday, with potential on-call requirements as part of the team.

Qualifications

• GCSEs including English and Maths.
• One of: SC-900 (Security Fundamentals), CompTIA Security+ or ISC2 CC or equivalent.
• Experience in MSP/IT service desk or cyber security role.
• Experience using ticketing systems and SLAs.
• Experience supporting Microsoft 365 environments.
• Ability to investigate and triage security alerts and follow incident response procedures.
• Strong written and verbal communication skills.
• Strong organisational skills and attention to detail.
• Willingness to participate in on-call or extended-hours support.

Responsibilities

• Act as first responder on security tickets; triage alerts and incidents.
• Prioritise tickets based on internal SLAs and escalate as needed.
• Log tickets in ConnectWise Manage with detailed notes.
• Collaborate with 2nd/3rd line security engineers for timely resolutions.
• Remediate security issues to align with baselines and escalate when needed.
• Support patching and configuration monitoring, report root causes.
• Deliver clear, actionable remediation guidance to customers.
• Contribute to security awareness training and phishing simulations.

Skills

Customer service

Communication

Attention to detail

Team player

On-call readiness

Education

GCSEs (English & Maths)

Security/IT accreditation (SC-900, CompTIA Security+, CC)

Tools

ConnectWise Manage

Microsoft 365

Job description

Doherty Associates (DA) have delivered IT solutions for over 30 years to world-renowned, international clients, primarily within the professional and financial services sectors. We are a Microsoft Solutions Partner with multiple designations, hold a Tier 1 Microsoft CSP relationship, and operate to ISO27001 & ISO9001 standards.

Our services are built on the Microsoft cloud ecosystem and focused on delivering secure, high-quality, outcome-driven solutions for our clients.

Our customers rely on us to bring specialist expertise and innovation across cloud solutions, hybrid working, modern workplace, data and BI, cyber security, governance and compliance. We have built a reputation as a company that keeps its promises and delivers quality.

About the role

This role is office based (London, Holborn), Monday to Friday, between the hours 10:30 and 19:00.

Reporting to the Head of Managed Services, the Security Analyst is part of our Managed Services department and is responsible for the day-to-day delivery of our security services to DA customers. You will act as a first responder on security tickets, triaging and resolving alerts, incidents and requests, and remediating issues to bring customer environments in line with our defined security baselines.

Alongside incident work, you will deliver the regular activities that keep our customers secure and informed – vulnerability scanning and remediation, patching and configuration compliance monitoring, security awareness training and phishing simulations – and produce clear, structured reports that translate technical findings into prioritised, actionable recommendations for customers.

This role will best suit someone early in their cyber security career who is keen to learn, with a solid grounding in Microsoft 365 and a genuine interest in security. You will work closely with our 2nd and 3rd Line Security Engineers, who will support your development and to whom you will elevate more complex work to. While technical ability matters, equally important are strong customer-facing attributes – active listening, empathy, attention to detail and clear communication – as you will regularly engage directly with customers.

You will form part of the security escalation path, which may include overtime, changes to shift pattern and/or an on-call cover.

Responsibilities

Security Ticket Management & Incident Response

• Act as a first responder on security tickets; responding promptly to alerts, incidents and requests logged by customers
• Assess, classify and prioritise incoming security tickets in line with internal SLAs, escalating where appropriate so that incidents progress without delay
• Accurately log and efficiently progress tickets within the ConnectWise Manage platform
• Keep detailed notes and time entries within tickets, so that anyone reading a ticket for the first time has all the information required to progress it

Technical Resolution & Remediation

• Resolve security tickets within your technical ability and collaborate with the wider team (2nd / 3rd Line Security Engineers and other specialists) to reach timely resolutions
• Remediate security issues to bring customer environments in line with defined security baselines, escalating to senior engineers where remediation is beyond your technical ability
• Support patching compliance and security configuration monitoring, investigating and remediating issues and escalating root-cause findings to senior engineers where required
• Form part of the security escalation path, which may include overtime, changes to shift pattern or on-call cover
• Customer Service & Communication
• Deliver outstanding customer service across all forms of communication
• As part of a wider team, create tickets or route calls through to other engineers as required
• Ensure accurate, consistent, clear and understandable communication via tickets, email and over the phone

Security Operations & Service Activities

• Carry out regular Vulnerability Management Service activities, such as running scans, producing reports and performing remediation activities

Training, Awareness & Documentation

• Manage the delivery of Security Awareness Training and Phishing Simulations using our online platform
• Follow existing procedures and act as a champion of security documentation on the desk, amending existing guides and creating new ones where applicable
• Produce clear, structured reports outlining risks, findings, and recommended improvements
• Record findings in client risk logs and present them to customers as required, providing actionable, prioritised remediation guidance
• Support ongoing improvement of customers' security posture through regular reviews, reassessments and follow-up of outstanding remediation actions

Administration

• Accurately complete daily timesheets and expenses reporting requirements

Team Contribution

• Support training and onboarding of junior and new engineers in the DA office
• Promote an inclusive, collaborative and respectful working environment, leading by example

Qualifications, experience and skills

• GCSEs (or equivalent) including English and Mathematics.
• A least one of the following accreditations, or actively working towards achieving one: Microsoft SC-900 (Security, Compliance & Identity Fundamentals), CompTIA Security+ or ISC2 Certified in Cybersecurity (CC)Relevant IT or Cyber Security qualification, or equivalent industry experience.
• Previous experience working in an MSP or other outsourced IT services environment, ideally in an IT Service Desk, Technical Support or Cyber Security role.
• Experience using ticketing systems and following SLA-driven processes.
• Experience supporting Microsoft 365 environments.
• Ability to investigate and triage security alerts and incidents.
• Ability to follow documented incident response procedures.
• Strong written and verbal communication skills.
• Ability to document findings, actions and recommendations clearly.
• Strong organisational skills and attention to detail.
• Ability to prioritise workloads and escalates appropriately.
• Willingness to participate in on-call or extended-hours support where required.

Understanding of:

• Microsoft 365 security fundamentals
• Email security threats (phishing, malware, spoofing)
• Endpoint security fundamentals
• Vulnerability management principles
• Security patching and update management
• Identity and access management basics
• Empathy – ability to listen to understand and support.
• Adaptable – being able to adjust to changing workloads and priorities.
• High sense of urgency and accountability.
• Proactive and self-motivated.
• Team player who can foster an inclusive and collaborative working environment.
• Keen to learn and share knowledge.

What we offer in return

• Basic salary plus performance bonus
• 34 days of annual leave (incl. 8 UK bank holidays and a day off on your birthday)
• Enhanced family-friendly benefit schemes including company sick pay
• Sponsored training and development and where applicable, a technical exams incentive scheme, including BTL1
• Private medical insurance and Employee Assistance Programme
• Income protection and life insurance
• Company Pension scheme

DISCLAIMER - We use AI notetaking tools to transcribe interviews for internal review. By proceeding, you consent to this.