Security Analyst

The opportunity to join us at the forefront of cyber defence, where you'll play a critical role in protecting our business from evolving threats. You'll proactively monitor, investigate and respond to security incidents using Microsoft Sentinel, Microsoft Defender and leading EDR technologies, working closely with our SIEM partner to identify and neutralise risks before they impact the organisation.

Leading end-to-end incident response, you'll drive containment, recovery and root cause analysis while continuously strengthening our security posture by enhancing runbooks, response playbooks and operational processes. This is an opportunity to make a tangible impact in a fast-paced environment where your expertise will shape and mature our cyber resilience.

What you'll be doing:

• Hands-on Security Analyst role within Kubrick, focused on protecting our internal environment while delivering key security implementations.
• Provide occasional internal IT support and client assurance activities including RFPs and security questionnaires.
• Lead our Security Operations capability, proactively monitoring, triaging and investigating security alerts through Microsoft Sentinel, Microsoft Defender and EDR technologies.
• Own end-to-end incident response, leading containment, eradication, recovery and post-incident reviews to ensure lessons learned drive continuous improvement.
• Develop and enhance security operations, maintaining runbooks, response playbooks and operational documentation that enable a scalable and resilient security function.
• Drive key cyber security projects, implementing and optimising security controls across the Microsoft security ecosystem.
• Own our vulnerability management programme, overseeing vulnerability scanning, risk assessment, remediation prioritisation and reporting to reduce organisational risk.
• Strengthen organisational resilience, supporting the development, testing and continuous improvement of Business Continuity and Disaster Recovery plans through exercises and simulations.
• Champion security governance and compliance, maintaining our Information Security Management System (ISMS) in line with ISO 27001, NIST and Cyber Essentials Plus, while supporting internal and external audits.
• Partner with clients and the wider business, contributing to security due diligence, client questionnaires, RFPs and tender responses.

What we're looking for:

• Solid foundation within cybersecurity or IT role with hands-on security project or implementation experience.
• CISM, CISSP certifications.
• Microsoft security stack: Defender, Purview, Intune, Entra ID, Sentinel, and M365 services.
• Hands-on experience with AI/ML security challenges.
• Vulnerability management experience including remediation tracking.
• Strong understanding of DLP, data classification, and information protection.
• Experience with BYOD management and mobile device/application security.
• Cloud security knowledge across Azure and M365.
• Familiarity with frameworks: ISO 27001, NIST, Cyber Essentials.
• PowerShell scripting for automation and security tasks.
• Strong written communication skills for both technical and non-technical audiences.

Desirable Skills:

• BCP/DR planning and testing experience.
• Hands-on or managed penetration testing experience.
• Familiarity with PAM, SSO, or CASB solutions.
• Python or additional scripting experience.
• Relevant certifications: SC-200, AZ-500, CompTIA Security+.

Benefits:

• Enhanced paid maternity, paternity and adoption leave, above the statutory minimum.
• Additional family leave support, including up to 18 weeks parental leave.
• 33 days annual leave (25 days annual leave plus 8 public holidays).
• Flexible working options, including flexible start and finish times and part-time arrangements.
• Hybrid working - choose to work from home, the Kubrick office, or your clients' office.
• Pension matching up to 5%.
• Unlimited mental health support through Help@Hand, available 24/7.
• Financial wellbeing support.
• Cycle to Work scheme.
• Specsavers eye care vouchers.
• Internal mobility and career development opportunities.
• Recognition and reward programs.
• Learning and development opportunities, including professional certifications.
• Employee Assistance Program (EAP).

Diversity & Inclusion:

We encourage applications from women and people from all underrepresented backgrounds in data and AI, including racial and ethnic minorities, LGBTQ+ people, people with disabilities, and people who are neurodivergent. If you need any adjustments during the recruitment process, at any stage, for any reason, just let us know. We're here to support you.