Senior Security Operations Analyst

DGH Recruitment Limited; Holbeck; On-site; GBP 77,000 - 104,000; Full time

Job summary

DGH Recruitment Limited, Leeds-based, seeks a Senior Security Operations Analyst to join a security operations center focused on detection, threat hunting, automation, and incident response for client environments.

You will monitor, investigate, and triage alerts across cloud, network, and endpoints, work with the automation team to tune detections, and provide Tier 1 and Tier 2 support for email gateways, proxies and related security controls.

Qualifications

• 5+ years in Security Operations/SOC or Incident Response.
• Experience across IR, alert triage, threat hunting, DLP, and risk analysis.
• Experience with at least one major SIEM and EDR; hands-on KQL/SPL, PowerShell or Python preferred.
• Experience with Security Orchestration and Automation (SOAR).
• Certifications such as SC-200, AZ-500, GCIA, GCIH, GCDA, CISSP or CISM preferred.

Responsibilities

• Monitor, investigate, and triage security alerts, anomalies, indicators of compromise, and policy violations.
• Participate in continuous threat hunting activities, leveraging threat intelligence and proactive analysis to identify threats and trends.
• Work with the Detection and Automation team to support development of detection alerts, automation, and tuning to reduce false positives.
• Provide Tier 1 triage of secure email gateway alerts and phishing incidents, escalating threats per procedures.
• Provide Tier 2 operational support for web proxy and secure web gateway technologies, troubleshooting and corrective actions.

Skills

Incident response

Threat hunting

Security operations

Operational risk analysis

Data loss prevention

Education

SC-200

AZ-500

GCIA

GCIH

GCDA

CISSP

CISM

Tools

SIEM platform

EDR platform

PowerShell

Python

KQL

SPL

SOAR

Job description

Salary: £90,000 - 90,000 per year

Requirements:

• 5 years in Security Operations/SOC or Incident Response, including in a 24/7 or global environment.
• Proven experience across incident response, alert triage, threat hunting, data loss prevention, and operational risk analysis.
• Demonstrable experience with at least one major SIEM and EDR platform; additional hands-on KQL/SPL, PowerShell, or Python experience preferred.
• Demonstrable experience with Security Orchestration and Automation.
• Certifications such as SC-200, AZ-500, GCIA, GCIH, GCDA, CISSP, or CISM preferred.

Responsibilities:

• Monitor, investigate, and triage security alerts, anomalies, indicators of compromise, and policy violations, correlating network, cloud, endpoint, and log-based activity to identify attacks, unauthorised use, and suspicious activity.
• Participate in continuous threat hunting activities, leveraging threat intelligence and proactive analysis to identify suspicious activity, emerging threats, and attack trends.
• Work with the Detection and Automation team to support development of detection alerts, security automation, and recommendations for tuning rules to reduce false positives.
• Provide Tier 1 triage of secure email gateway alerts and phishing incidents, escalating and remediating threats in accordance with established procedures.
• Provide Tier 2 operational support for web proxy and secure web gateway technologies, including troubleshooting, root cause analysis, and implementation of corrective actions to maintain service reliability and security.

Technologies:

• Cloud
• Support
• Network
• PowerShell
• Python
• Security
• Web

More:

We are a leading client in the Professional Services industry and are seeking a Senior Security Operations Analyst to join our team in Leeds. You will support the continuous monitoring and analysis of data, alerts, and reports to ensure timely and proactive escalation of potential events and items of interest. This role sits within a security operations environment focused on detection, threat hunting, automation, and operational support.