Security Operations Analyst: Threat Detection & Response

Caraffi; Reading; On-site; GBP 55,000 - 75,000; Full time

Job summary

Caraffi, a leading global retail organisation, is seeking an experienced Cyber Security Operations Analyst to join their Cyber Security Operations function in Reading. This permanent role focuses on strengthening cyber defence during a major technology transformation.

You will enhance security operations, drive detection and response, and maturity of security processes, tooling and documentation, while supporting incident response and forensics activities as needed.

Qualifications

• 4+ years’ enterprise cyber security experience, ideally cloud and on‑prem.
• Strong background in Security Operations, Incident Response and investigations.
• Degree, equivalent experience or recognised security/IT certifications.

Responsibilities

• Build and maintain knowledge of security technologies, driving improvements across processes and tooling.
• Manage and triage security tickets with timely, accurate handling.
• Validate tool coverage against asset inventories to ensure protection.
• Create, maintain and improve SOC documentation and procedures.
• Conduct in‑depth analysis of incidents and investigations.
• Coordinate internal response during major incidents and support post‑incident reviews.
• Identify threats, gaps and opportunities for improvement.
• Produce metrics and reporting for operational visibility.
• Coordinate digital forensics with third parties when required.
• Perform vulnerability assessments and support remediation prioritisation.
• Contribute to SOC operations including threat detection and response.

Skills

Cyber security operations

Incident response

Threat detection

Vulnerability management

Security tooling

Team collaboration

Education

Degree or certifications

Job description

Caraffi, a leading global retail organisation, is seeking an experienced Cyber Security Operations Analyst to join their Cyber Security Operations function in Reading. This permanent role focuses on strengthening cyber defence during a major technology transformation.

You will enhance security operations, drive detection and response, and maturity of security processes, tooling and documentation, while supporting incident response and forensics activities as needed.