Cyber Security Analyst - Flexible MSP Security Operations

PLANET RECRUITMENT SERVICES LTD; Abingdon (VA); On-site; GBP 37,000 - 45,000; Full time

Benefits offered by this job

25+ Days Holiday and rising (plus bank

Flexible working (WFH incentives)

Bupa Cash Plan

Electric Vehicle Scheme

Cycle Scheme

Discounted Gym Membership

Paid Charity Day

Car Parking

Job summary

PLANET RECRUITMENT SERVICES LTD. is seeking a Cyber Security Analyst to operate and improve security services for internal and client environments.

The role handles threat investigations, incident response, vulnerability management and security improvement activities within an MSP setting. Responsibilities include monitoring Microsoft 365 and Sophos platforms, escalating significant incidents and maintaining security documentation.

Qualifications

• Experience working in an MSP, multi-client technical support, infrastructure or security administrator role.
• Practical experience using security platforms to investigate alerts, respond to issues and improve security posture, including Microsoft 365 security tooling and Sophos.
• Experience investigating security incidents, suspicious activity, phishing, malware, account compromise or similar security scenarios.
• Experience supporting security hardening, configuration improvement, vulnerability management, patching, remediation tracking or control implementation.
• Strong troubleshooting skills across user, endpoint, identity, email, cloud and client configuration scenarios.
• Strong curiosity and initiative, with the ability to investigate unclear security issues, pull on technical threads and follow them through to practical outcomes.
• Ability to communicate technical risks clearly to Service Desk, Infrastructure, Account Managers and clients.
• Strong documentation skills, including evidence gathering, investigation notes, exceptions, remediation records and review dates.

Responsibilities

• The Security Administrator is responsible for the hands-on operation and improvement of the MSP's security services across internal and client environments.
• The role acts as a technical security escalation point for Service Desk, Infrastructure, Account Managers and clients, supporting QSRs, vulnerability management, exception handling and security improvement activity.
• Security Operations: Monitor and investigate alerts across Microsoft 365, Sophos and other security platforms used across internal and client environments.
• Investigate security incidents
• Support containment, remediation and recovery activity for security incidents.
• Escalate significant incidents
• Support Major Incident response activity.
• Maintain security documentations.
• Contribute to continuous improvement of the MSP's internal security posture through remediation support, control implementation and evidence gathering.
• Vulnerability & Patch Management: Review vulnerability scan results.
• Validate findings and identify false positives.
• Track remediation activities.
• Work with Service Desk and Infrastructure teams to reduce risk exposure.
• Produce regular vulnerability posture reporting.
• Microsoft 365 Security: Review Microsoft Secure Score, Defender, Entra ID, Intune and Conditional Access recommendations.
• Support implementation of Microsoft 365 security improvements across internal and client environments.
• Investigate Microsoft 365 security alerts, identity risks and configuration issues.
• Assist with MFA, Conditional Access, Defender, Intune and endpoint security initiatives.

Skills

Threat Investigation

Security Improvement Delivery

Escalation Judgement

Evidence & Documentation Discipline

Service Desk Enablement

Client Advisory Support

Operational Ownership

Prioritisation Under Pressure

Pragmatic Security Mindset

Continuous Learning

Tools

Microsoft 365 Security tooling

Sophos

Job description

PLANET RECRUITMENT SERVICES LTD. is seeking a Cyber Security Analyst to operate and improve security services for internal and client environments.

The role handles threat investigations, incident response, vulnerability management and security improvement activities within an MSP setting. Responsibilities include monitoring Microsoft 365 and Sophos platforms, escalating significant incidents and maintaining security documentation.