Senior Security Analyst: Lead Incident Response

ANS Group; Manchester; On-site; GBP 65,000 - 90,000; Full time

Job summary

ANS Group is seeking a Senior Security Analyst to lead response to complex cyber threats and act as the highest technical escalation within the SOC. You will investigate, contain incidents, hunt for threats, and strengthen customer security across SIEM, SOAR, EDR/XDR, cloud and identity platforms.

You will contribute to automation, playbook development, service improvements and grow the SOC team, with on-call duties and overtime where applicable.

Qualifications

• Strong knowledge of modern security operations and incident response.
• Experience with SIEM, SOAR, EDR/XDR, cloud and identity security platforms.
• Understanding of threat intelligence, threat hunting, MITRE ATT&CK and detection engineering.
• Familiarity with Windows, networking, cloud security and vulnerability management.

Responsibilities

• Lead major incident investigations, response and customer communications.
• Analyse and remediate threats across SIEM, EDR/XDR, cloud and identity platforms.
• Produce incident reports, root cause analysis and response recommendations.
• Proactively hunt for threats and investigate emerging attack techniques.
• Leverage threat intelligence to improve detection and response capabilities.
• Enhance coverage aligned to the MITRE ATT&CK framework.
• Develop and optimise detections, analytics and SOAR playbooks.
• Improve alert quality, monitoring visibility and response automation.
• Support onboarding of new security tools and log sources.
• Act as the senior escalation point for SOC analysts.
• Mentor junior team members and uphold investigation quality.
• Contribute to training, documentation and continuous improvement.
• Provide technical expertise during customer incidents and reviews.
• Deliver security findings, recommendations and service guidance.
• Support customer onboarding and ongoing security optimisation.
• Maintain compliance with SLAs, processes and documentation standards.
• Support audits, service development and continuous improvement initiatives.

Skills

Security operations

Threat detection

Incident response

SIEM

SOAR

EDR/XDR

Cloud security

Identity security

MITRE ATT&CK

KQL

Windows

Networking

Vulnerability management

Threat hunting

Education

Bachelor’s degree in a relevant field

Tools

SIEM

SOAR

EDR/XDR

Job description

ANS Group is seeking a Senior Security Analyst to lead response to complex cyber threats and act as the highest technical escalation within the SOC. You will investigate, contain incidents, hunt for threats, and strengthen customer security across SIEM, SOAR, EDR/XDR, cloud and identity platforms.

You will contribute to automation, playbook development, service improvements and grow the SOC team, with on-call duties and overtime where applicable.