Security Analyst

ANS Group; Manchester; On-site; GBP 35,000 - 55,000; Full time

Job summary

An established industry player is seeking a proactive Security Analyst to join a dynamic 24/7 Security Operations Center. This role offers the opportunity to work with cutting-edge cyber defense technologies while collaborating with a skilled team of security professionals dedicated to protecting SMB and Enterprise clients from cyber threats. You will be responsible for triaging security incidents, tuning alerts, and providing remediation advice, all while receiving support for your professional development through certifications and paid study leave. If you are passionate about cybersecurity and eager to grow in a fast-paced environment, this position could be the perfect fit for you.

Qualifications

• Good understanding of security technologies and incident response.
• Experience in security engineering or operations, ideally in MSSP.

Responsibilities

• Triage and investigate security incidents in Microsoft Sentinel.
• Monitor SOC alerts and assist with compromise investigations.
• Communicate with clients during incidents via email and phone.

Skills

Security engineering

Security Operations

Microsoft Sentinel

Microsoft Defender

Microsoft Cloud Technologies

Linux operating systems

Windows operating systems

Incident response

Network Defence

NIST CVSS Vulnerabilities

Secure development principles

OWASP top 10

Job description

The role

Joining us as a Security Analyst, you will be working in a busy, 247 SoC, while working with some of the most advanced enterprise grade cyber defence technology. Our Managed Detection and Response, and Extended Detection and Response services are based on the world’s best security technology; and you'll get to work alongside a team of security cleared, experienced analysts and engineers, who work to keep our SMB and Enterprise customers safe from cyber threats 24/7/365. ANS will support your learning and development throughout your career journey through completion of certifications accompanied by paid study leave.

What will I be doing?

• Triage and investigation of Security Incidents in Sentinel
• Tunning of Alerts in Sentinel
• Tuning security alerting and prevention rulesets
• Managing security technologies
• Communicating with clients during an incident (email and phone)
• On-boarding of customers into Managed XDR services
• Monitoring and responding to SOC alerts
• Assisting with compromise investigations and e-discovery requests
• Liaising with clients via ticket and phone call and also during incidents
• Reviewing vulnerability scans and providing remediation advice to clients
• Proactive monitoring of clients solutions
• Assisting Sales/Account managers with client security

What will I bring to the role?

A good understanding of the following technologies is required:

• Previous Security engineering or Security Operations experience, ideally within another MSSP
• Microsoft sentinel
• Microsoft Defender
• A good understanding of Microsoft Cloud Technologies
• Experience with Linux & Windows operating systems
• Knowledge of syslog and event viewer
• Incident response
• Network Defence
• NIST CVSS Vulnerabilities and scoring system
• OS specific log data
• Knowledge of secure development principles and OWASP top 10

Essential:

• Candidate must be capable of achieving HMG Security Clearance,which requires 5 years of UK residence
• This role includes shift pattern work, including nights