Threat Detection & Response Analyst

Nettitude Group; Birmingham; On-site; GBP 50,000 - 80,000; Full time

Job summary

Nettitude Group in Birmingham is seeking a vigilant SOC Monitoring Analyst to join our 24x7 team, using SIEM, EDR, and threat intelligence to triage events and advise on risk.

You will produce detailed incident reports, tune alerts, and collaborate on advancing monitoring capabilities, including malware analysis and cross‑team projects.

The role demands strong communication with customers and stakeholders, and a proactive approach to threat hunting and response.

Qualifications

• Experience with Microsoft Sentinel and Defender in an enterprise environment.
• Knowledge of SIEM/EDR technologies, with focus on Sentinel to deliver detection, investigation and response.
• Ability to operate in a complex, high-performing service environment using Microsoft security tools.
• Experience conducting security investigations using large datasets and KQL.
• Solid understanding of enterprise IT infrastructure (Windows/Linux) and networking.

Responsibilities

• Operate as part of the 24x7 SOC Monitor Team, providing proactive defensive monitoring to clients.
• Generate detailed, informative incident reports with recommendations, mitigations, and remediations.
• Respond to, and action all alerts and customer requests within agreed SLAs.
• Maintain awareness of the latest Defensive Monitoring technologies and trends.
• Maintain an up-to-date understanding of current threats and trends in cyber crime.
• Produce high quality management and operational reports within SLAs.
• Constantly tune and improve alerts, playbooks, and automations.
• Maintain regular written and verbal communication with customers, suppliers, and internally as required.

Skills

Communication skills

Customer-facing

Analytical thinking

Mentoring junior staff

Tools

Microsoft Sentinel

Microsoft Defender

KQL

Windows OS

Linux OS

CrowdStrike CCFA

SC-200

SC-100

Job description

Nettitude Group in Birmingham is seeking a vigilant SOC Monitoring Analyst to join our 24x7 team, using SIEM, EDR, and threat intelligence to triage events and advise on risk.

You will produce detailed incident reports, tune alerts, and collaborate on advancing monitoring capabilities, including malware analysis and cross‑team projects.

The role demands strong communication with customers and stakeholders, and a proactive approach to threat hunting and response.