Senior Security Analyst

ANS Group; Manchester; On-site; GBP 60,000 - 90,000; Full time

Job summary

ANS Group is seeking a Senior Security Analyst to lead complex cyber security responses and act as the highest technical escalation point within our SOC. You will investigate, contain incidents, hunt threats, and enhance detection across SIEM, SOAR, EDR/XDR, cloud and identity platforms.

You will also contribute to automation, playbooks, service improvements and mentor the team, with on-call duties and potential overtime. Strong reporting and customer-facing delivery are essential.

Qualifications

• Experience within a SOC, MDR, MSSP or cyber security operations environment.
• Proven ability to investigate high-severity security incidents.
• Hands-on experience with SIEM, EDR and customer-facing incident response.
• Comfortable producing technical reports and mentoring junior analysts.

Responsibilities

• Lead major incident investigations, response and customer communications.
• Analyse and remediate threats across SIEM, EDR/XDR, cloud and identity platforms.
• Produce incident reports, root cause analysis and response recommendations.
• Proactively hunt for threats and investigate emerging attack techniques.
• Leverage threat intelligence to improve detection and response capabilities.
• Develop and optimise detections, analytics and SOAR playbooks.
• Improve alert quality, monitoring visibility and response automation.
• Support onboarding of new security tools and log sources.
• Act as the senior escalation point for SOC analysts.
• Mentor junior team members and uphold investigation quality.
• Provide technical expertise during customer incidents and reviews.
• Deliver security findings, recommendations and service guidance.
• Maintain compliance with SLAs, processes and documentation standards.

Skills

SOC experience

Incident response

Threat hunting

MITRE ATT&CK

Cloud security

PowerShell scripting

Python scripting

Tools

SIEM

SOAR

EDR/XDR

Cloud platforms

Identity security

KQL

Job description

The role

As a Senior Security Analyst, you'll lead the response to complex cyber security threats, acting as the highest technical escalation point within our SOC. You'll investigate and contain incidents, hunt for emerging threats, enhance detection capabilities, and help strengthen customer security across SIEM, SOAR, EDR/XDR, cloud and identity platforms. You'll also contribute to automation, playbook development, service improvements and the growth of the wider SOC team, while participating in an on-call rota with additional allowances and overtime where applicable.

What will I be doing?

Security Monitoring & Incident Response

• Lead major incident investigations, response and customer communications.
• Analyse and remediate threats across SIEM, EDR/XDR, cloud and identity platforms.
• Produce incident reports, root cause analysis and response recommendations.

Threat Hunting & Intelligence

• Proactively hunt for threats and investigate emerging attack techniques.
• Leverage threat intelligence to improve detection and response capabilities.
• Enhance coverage aligned to the MITRE ATT&CK framework.

Detection Engineering & Automation

• Develop and optimise detections, analytics and SOAR playbooks.
• Improve alert quality, monitoring visibility and response automation.
• Support onboarding of new security tools and log sources.

Technical Leadership

• Act as the senior escalation point for SOC analysts.
• Mentor junior team members and uphold investigation quality.
• Contribute to training, documentation and continuous improvement.

Customer Engagement

• Provide technical expertise during customer incidents and reviews.
• Deliver security findings, recommendations and service guidance.
• Support customer onboarding and ongoing security optimisation.

Operational Excellence

• Maintain compliance with SLAs, processes and documentation standards.
• Support audits, service development and continuous improvement initiatives.

What will I bring to the role?

Technical Knowledge

• Strong knowledge of modern security operations, threat detection and incident response.
• Experience with SIEM, SOAR, EDR/XDR, cloud and identity security platforms.
• Understanding of threat intelligence, threat hunting, MITRE ATT&CK and detection engineering.
• Familiarity with Windows, networking, cloud security, vulnerability management and KQL.

Experience

• Experience within a SOC, MDR, MSSP or cyber security operations environment.
• Proven ability to investigate high-severity security incidents.
• Hands-on experience with SIEM, EDR and customer-facing incident response.
• Comfortable producing technical reports and mentoring junior analysts.

Desirable Technical Skills

• PowerShell and Python scripting.
• API integrations and security automation.
• Detection engineering and content development.
• SOAR playbook creation and optimisation.