Senior SecOps Analyst: Incident Response & Cloud Security

TalentHawk; Glasgow; On-site; GBP 60,000 - 80,000; Full time

Job summary

TalentHawk is seeking an experienced Senior Security Operations Analyst in Glasgow to join a busy security team. This hands-on role focuses on monitoring, investigation, and incident response across a complex enterprise.

Responsibilities include managing alerts, performing detailed analyses, and supporting containment, remediation, and recovery efforts. You will work with MS Sentinel, Defender, and AWS security services daily to protect critical systems.

Qualifications

• 5 years in a Security Operations environment (SecOps).
• Experience in a 2nd/3rd line security operations role.
• AWS security services and cloud security operations experience.
• Hands-on experience with Microsoft Sentinel and Defender.
• Strong incident response, alert triage, and investigations knowledge.
• Experience analyzing logs and security telemetry from multiple sources.

Responsibilities

• Monitor, triage, and investigate security alerts and incidents.
• Analyse security events and suspicious activity in detail.
• Lead and support incident response activities including containment and recovery.
• Utilise Microsoft Sentinel and Defender to detect and respond to threats.
• Maintain security monitoring use cases and detection capabilities.
• Collaborate with infrastructure, cloud, and support teams to resolve issues.
• Produce investigation reports and recommendations to improve security posture.
• Contribute to continuous improvement of SecOps processes and procedures.
• Act as escalation point for complex security incidents.

Skills

SecOps experience

2nd/3rd line ops

AWS cloud security

Microsoft Sentinel

Microsoft Defender

Incident response

Log analysis

Stakeholder comms

Security frameworks

Certifications (e.g., SC-200, CISSP)

Education

Security certifications (SC-200, CISSP, etc.)

Tools

Microsoft Sentinel

Microsoft Defender

AWS Security Services

Job description

TalentHawk is seeking an experienced Senior Security Operations Analyst in Glasgow to join a busy security team. This hands-on role focuses on monitoring, investigation, and incident response across a complex enterprise.

Responsibilities include managing alerts, performing detailed analyses, and supporting containment, remediation, and recovery efforts. You will work with MS Sentinel, Defender, and AWS security services daily to protect critical systems.