Senior Security Analyst

ANS Group; Manchester; On-site; GBP 65,000 - 90,000; Full time

Job summary

ANS Group is seeking a Senior Security Analyst to lead response to complex cyber threats and act as the highest technical escalation within the SOC. You will investigate, contain incidents, hunt for threats, and strengthen customer security across SIEM, SOAR, EDR/XDR, cloud and identity platforms.

You will contribute to automation, playbook development, service improvements and grow the SOC team, with on-call duties and overtime where applicable.

Qualifications

• Strong knowledge of modern security operations and incident response.
• Experience with SIEM, SOAR, EDR/XDR, cloud and identity security platforms.
• Understanding of threat intelligence, threat hunting, MITRE ATT&CK and detection engineering.
• Familiarity with Windows, networking, cloud security and vulnerability management.

Responsibilities

• Lead major incident investigations, response and customer communications.
• Analyse and remediate threats across SIEM, EDR/XDR, cloud and identity platforms.
• Produce incident reports, root cause analysis and response recommendations.
• Proactively hunt for threats and investigate emerging attack techniques.
• Leverage threat intelligence to improve detection and response capabilities.
• Enhance coverage aligned to the MITRE ATT&CK framework.
• Develop and optimise detections, analytics and SOAR playbooks.
• Improve alert quality, monitoring visibility and response automation.
• Support onboarding of new security tools and log sources.
• Act as the senior escalation point for SOC analysts.
• Mentor junior team members and uphold investigation quality.
• Contribute to training, documentation and continuous improvement.
• Provide technical expertise during customer incidents and reviews.
• Deliver security findings, recommendations and service guidance.
• Support customer onboarding and ongoing security optimisation.
• Maintain compliance with SLAs, processes and documentation standards.
• Support audits, service development and continuous improvement initiatives.

Skills

Security operations

Threat detection

Incident response

SIEM

SOAR

EDR/XDR

Cloud security

Identity security

MITRE ATT&CK

KQL

Windows

Networking

Vulnerability management

Threat hunting

Education

Bachelor’s degree in a relevant field

Tools

SIEM

SOAR

EDR/XDR

Job description

As a Senior Security Analyst, you'll lead the response to complex cyber security threats, acting as the highest technical escalation point within our SOC. You'll investigate and contain incidents, hunt for emerging threats, enhance detection capabilities, and help strengthen customer security across SIEM, SOAR, EDR/XDR, cloud and identity platforms. You'll also contribute to automation, playbook development, service improvements and the growth of the wider SOC team, while participating in an on-call rota with additional allowances and overtime where applicable.

As a Senior Security Analyst, you'll lead the response to complex cyber security threats, acting as the highest technical escalation point within our SOC. You'll investigate and contain incidents, hunt for emerging threats, enhance detection capabilities, and help strengthen customer security across SIEM, SOAR, EDR/XDR, cloud and identity platforms. You'll also contribute to automation, playbook development, service improvements and the growth of the wider SOC team, while participating in an on-call rota with additional allowances and overtime where applicable.

What will I be doing?

Security Monitoring & Incident Response

• Lead major incident investigations, response and customer communications.
• Analyse and remediate threats across SIEM, EDR/XDR, cloud and identity platforms.
• Produce incident reports, root cause analysis and response recommendations.

Threat Hunting & Intelligence

• Proactively hunt for threats and investigate emerging attack techniques.
• Leverage threat intelligence to improve detection and response capabilities.
• Enhance coverage aligned to the MITRE ATT&CK framework.

Detection Engineering & Automation

• Develop and optimise detections, analytics and SOAR playbooks.
• Improve alert quality, monitoring visibility and response automation.
• Support onboarding of new security tools and log sources.

Technical Leadership

• Act as the senior escalation point for SOC analysts.
• Mentor junior team members and uphold investigation quality.
• Contribute to training, documentation and continuous improvement.

Customer Engagement

• Provide technical expertise during customer incidents and reviews.
• Deliver security findings, recommendations and service guidance.
• Support customer onboarding and ongoing security optimisation.

Operational Excellence

• Maintain compliance with SLAs, processes and documentation standards.
• Support audits, service development and continuous improvement initiatives.

What will I bring to the role?

Technical Knowledge

• Strong knowledge of modern security operations, threat detection and incident response.
• Experience with SIEM, SOAR, EDR/XDR, cloud and identity security platforms.
• Understanding of threat intelligence, threat hunting, MITRE ATT&CK and detection engineering.
• Familiarity with Windows, networking, cloud security, vulnerability management and KQL.

Experience

• Experience within a SOC, MDR, MSSP or cyber security operations environment.
• Proven ability to investigate high-severity security incidents.
• Hands-on experience with SIEM, EDR and customer-facing incident response.
• Comfortable producing technical reports and mentoring junior analysts.

Desirable Technical Skills

• PowerShell and Python scripting.
• API integrations and security automation.
• Detection engineering and content development.
• SOAR playbook creation and optimisation.