At a Glance
- Tasks: Protect our business from cyber threats by monitoring and responding to security incidents.
- Company: Join an award-winning consultancy at the forefront of data and AI solutions.
- Benefits: Enjoy flexible working, generous leave, and unlimited mental health support.
- Other info: We value diversity and encourage applications from all backgrounds.
- Why this job: Make a real impact in cybersecurity while developing your skills in a dynamic environment.
- Qualifications: Experience in cybersecurity or IT, with knowledge of Microsoft security tools.
The predicted salary is between 63000 - 77000 £ per year.
The opportunity
Join us at the forefront of cyber defence, where you'll play a critical role in protecting our business from evolving threats.
You'll proactively monitor, investigate and respond to security incidents using Microsoft Sentinel, Microsoft Defender and leading EDR technologies, working closely with our SIEM partner to identify and neutralise risks before they impact the organisation.
Leading end-to-end incident response, you'll drive containment, recovery and root cause analysis while continuously strengthening our security posture by enhancing runbooks, response playbooks and operational processes.
This is an opportunity to make a tangible impact in a fast-paced environment where your expertise will shape and mature our cyber resilience.
The opportunity
Join us at the forefront of cyber defence, where you'll play a critical role in protecting our business from evolving threats.
You'll proactively monitor, investigate and respond to security incidents using Microsoft Sentinel, Microsoft Defender and leading EDR technologies, working closely with our SIEM partner to identify and neutralise risks before they impact the organisation.
Leading end-to-end incident response, you'll drive containment, recovery and root cause analysis while continuously strengthening our security posture by enhancing runbooks, response playbooks and operational processes.
This is an opportunity to make a tangible impact in a fast-paced environment where your expertise will shape and mature our cyber resilience.
About Kubrick
We're an award-winning consultancy that helps organizations design, build and scale data and AI solutions that deliver lasting impact.
We work with organizations across industries including financial services, healthcare, retail, energy, aviation, and the public sector, and partner with leading technology providers such as Microsoft, Snowflake, Databricks, and Collibra.
Our status as a Gold Databricks Partner and an Elite Snowflake AI Data Cloud Services Partner means our people work at the cutting edge of these platforms, opening doors to specialist projects, accreditations, and career opportunities you won't find everywhere.
We're also just as committed to building an inclusive industry.
We're proud long-standing partners of Women in Data, a not for profit dedicated to helping more women succeed in data and AI, recognized in 2026 with a shortlisting for their Brand Partner of the Year award.
Our work in this space has also been recognized by She Can Code and Women in Tech.
- What You'll Be Doing
- Lead our Security Operations capability, proactively monitoring, triaging and investigating security alerts through Microsoft Sentinel, Microsoft Defender and EDR technologies, working closely with our SIEM partner to identify and respond to emerging threats
- Own end-to-end incident response, leading containment, eradication, recovery and post-incident reviews to ensure lessons learned drive continuous improvement
- Develop and enhance security operations, maintaining runbooks, response playbooks and operational documentation that enable a scalable and resilient security function
- Drive key cyber security projects, implementing and optimising security controls across the Microsoft security ecosystem, including:
- Microsoft Purview – Data Loss Prevention (DLP), data classification, sensitivity labels and information protection
- Microsoft Defender – Configuration, policy management and optimisation across endpoints, identity and cloud environments
- Microsoft Intune & BYOD – Device compliance, Mobile Application Management (MAM), Windows Autopilot, device provisioning and secure Bring Your Own Device programmes.
- Cloud Security – Strengthening security controls, identity governance and CASB policies across Microsoft Azure and Microsoft 365
- Automation & Scripting – Developing Power Shell solutions to automate security operations, reporting and configuration management
- Own our vulnerability management programme, overseeing vulnerability scanning, risk assessment, remediation prioritisation and reporting to reduce organisational risk
- Strengthen organisational resilience, supporting the development, testing and continuous improvement of Business Continuity and Disaster Recovery plans through exercises and simulations
- Champion security governance and compliance, maintaining our Information Security Management System (ISMS) in line with ISO 27001, NIST and Cyber Essentials Plus, while supporting internal and external audits
- Partner with clients and the wider business, contributing to security due diligence, client questionnaires, RFPs and tender responses, demonstrating our commitment to security excellence
What We're Looking For
- Solid foundation within cybersecurity or IT role with hands-on security project or implementation experience
- CISM, CISSP
- Microsoft security stack: Defender, Purview, Intune, Entra ID, Sentinel, and M365 services
- Hands-on experience with AI/ML security challenges, including attack vectors like prompt injection, model poisoning, and data exfiltration via LLMs, as well as applying security controls to AI-integrated environment
- Vulnerability management experience including remediation tracking
- Strong understanding of DLP, data classification, and information protection
- Experience with BYOD management and mobile device/application security
- Cloud security knowledge across Azure and M365
- Familiarity with frameworks: ISO 27001, NIST, Cyber Essentials
- Power Shell scripting for automation and security tasks
- Strong written communication skills for both technical and non-technical audiences
Desirable Skills
- BCP/DR planning and testing experience
- Hands-on or managed penetration testing experience
- Familiarity with PAM, SSO, or CASB solutions
- Python or additional scripting experience
- Relevant certifications: SC-200, AZ-500, Comp TIA Security+
Benefits
- Enhanced paid maternity, paternity and adoption leave, above the statutory minimum, with shared parental leave options
- Additional family leave support, including up to 18 weeks parental leave, 5 days dependent care leave, paid fertility treatment leave, and up to 3 weeks paid parental bereavement leave
- 33 days annual leave (25 days annual leave plus 8 public holidays)
- Flexible working options, including flexible start and finish times and part-time arrangements, available upon request
- Hybrid working - choose to work from home, the Kubrick office, or your clients' office (if applicable)
- Pension matching up to 5%
- Unlimited mental health support through Help@Hand, available 24/7 for you and eligible family members
- Financial wellbeing support
- Cycle to Work scheme, save up to 43% on a new bike through Evans Cycles
- Specsavers eye care vouchers
- Internal mobility and career development opportunities
- Recognition and reward programs
- Learning and development opportunities, including professional certifications
- Employee Assistance Program (EAP)
- Mental health, diversity and inclusion support
- Diversity & Inclusion
We encourage applications from women and people from all underrepresented backgrounds in data and AI, including racial and ethnic minorities, LGBTQ+ people, people with disabilities, and people who are neurodivergent.
If you need any adjustments during the recruitment process, at any stage, for any reason, just let us know. We’re here to support you.
#J-18808-Ljbffr
Security Analyst employer: Kubrick Group
At Kubrick Group, we pride ourselves on being an exceptional employer that fosters a collaborative and inclusive work culture. Our commitment to employee growth is evident through continuous learning opportunities and mentorship, particularly in the dynamic field of data and AI. Located in a vibrant area, we offer a stimulating environment where your contributions can lead to meaningful impacts for our clients and the industry.
StudySmarter Expert Advice🤫
We think this is how you could land Security Analyst
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including Kubrick Group, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through Kubrick Group
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at Kubrick Group. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace Security Analyst
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at Kubrick Group insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to Kubrick Group that you’re committed to staying ahead in the game.
How to prepare for a job interview at Kubrick Group
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at Kubrick Group to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at Kubrick Group.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
