Security Operations Analyst: Cloud & Incident Response

Cornerstone; Glasgow; Hybrid; GBP 56,000 - 67,000; Full time

Benefits offered by this job

Pension (6% employee + 6% employer)

Enhanced maternity & family leave

Life assurance

HolidayPlus

Virtual GP

Employee Assistance Programme

Retail and leisure discounts

Job summary

SGN is seeking a Technology Security Analyst to protect IT and OT networks across Glasgow, Edinburgh and Portsmouth. You will be the Security SME and the main contact for remediation of incidents, ensuring governance and security controls are in place.

You will work with security teams and vendors to monitor threats, manage vulnerabilities, and support audits. Flexible delivery and quarterly site visits are expected.

Qualifications

• Degree or equivalent career experience in a relevant discipline.
• Experience with cloud services (IaaS, PaaS, SaaS) including AWS.
• Knowledge of Sec Ops domains: monitoring, triage, threat and vulnerability management, incident handling.
• Familiarity with cyber security frameworks (NIST, ISO 27001/27005, IEC62443).
• Good communication skills across business levels.

Responsibilities

• Provide support across OT and IT security functions and governance.
• Document and present security metrics at monthly reviews.
• Act as SME in SGN Security for technical and non-technical guidance.
• Coordinate security activities with third-party vendors.
• Assist with audits, penetration testing, and incident lessons learned.
• Enforce security policies and coordinate mitigating actions with IT Leads.
• Attend head office in Portsmouth at least quarterly.

Skills

AWS

MS Sentinel

Defender

Security Monitoring

Threat & Vulnerability

Security Incident

Security Forensics

Vulnerability Assessments

Cyber Frameworks

Communication

Education

Bachelor's degree or equivalent in relevant discipline

Tools

SOC Tools

Job description

SGN is seeking a Technology Security Analyst to protect IT and OT networks across Glasgow, Edinburgh and Portsmouth. You will be the Security SME and the main contact for remediation of incidents, ensuring governance and security controls are in place.

You will work with security teams and vendors to monitor threats, manage vulnerabilities, and support audits. Flexible delivery and quarterly site visits are expected.