Senior 3rd Line Security Analyst - Hybrid (2 days WFH)

Xact Placements Limited; Reading; Hybrid; GBP 51,000 - 69,000; Full time

Job summary

Xact Placements Limited is recruiting a 3rd Line Security Analyst to join their Security Operations function in Reading. The role is senior and hands-on, owning the security platforms, detection content, and automation across client environments.

You will mentor the 2nd line team and serve as escalation for complex incidents. The role focuses on engineering and improving detection capabilities, implementing playbooks, and leading forensics and threat hunting activities within a hybrid

Qualifications

• Senior technical level within a SOC/CSE/ security engineering function.
• Experience administering Microsoft Sentinel, Defender XDR, CrowdStrike Falcon and related security tech.
• Proven incident response, threat hunting, malware analysis and forensics experience.

Responsibilities

• Lead end-to-end management of complex and high-severity security incidents.
• Conduct digital forensic investigations across cloud, identity, endpoint and network platforms.
• Design, implement and optimise detection content across security platforms with advanced queries.
• Act as senior technical owner for security platforms and on-call containment during incidents.
• Design and maintain automation workflows to reduce manual effort.
• Conduct proactive threat hunting and translate findings into detections and recommendations.
• Monitor and respond to events across Microsoft 365, Azure, AWS and hybrid environments.
• Support ISO 27001 and Cyber Essentials compliance with runbooks and SOPs.
• Provide technical leadership and mentoring to junior analysts.

Skills

SOC experience

Microsoft Sentinel

Defender XDR

CrowdStrike Falcon

KQL

PowerShell

Python

Automation

Threat Hunting

Incident Response

Tools

Logic Apps

Sentinel Playbooks

Power Automate

PowerShell

Python

Job description

Xact Placements Limited is recruiting a 3rd Line Security Analyst to join their Security Operations function in Reading. The role is senior and hands-on, owning the security platforms, detection content, and automation across client environments.

You will mentor the 2nd line team and serve as escalation for complex incidents. The role focuses on engineering and improving detection capabilities, implementing playbooks, and leading forensics and threat hunting activities within a hybrid