Senior Security Analyst

Hybrid – Buckinghamshire/Bedfordshire (2 days on-site per week)

Excellent salary + bonus + benefits + funded training & certifications

Our client, a leading global Managed Service Provider, is seeking a Senior Cyber Security Analyst to join and strengthen their growing security practice. This hands-on role sits at the forefront of defending enterprise-scale environments, offering exposure to varied client infrastructures, advanced tooling, and complex security challenges.

You’ll play a key part in maturing the security function—leading incident investigations, enhancing threat visibility, and mentoring the next generation of analysts—while continuously developing your skills with funded training and certification pathways.

What You’ll Do

• Lead and investigate high-impact cyber security incidents across global customer environments.
• Proactively hunt for threats, triage alerts, and identify anomalous behaviours before they escalate.
• Manage vulnerability assessments end-to-end, driving remediation outcomes with customers and internal teams.
• Optimise the Microsoft Security Stack: Sentinel, Defender (for Endpoint/Identity), Purview, and XDR.
• Support Zero Trust adoption, GRC initiatives, and audit/compliance reporting (ISO27001, NIST, SOC2, CE+).
• Centralise and improve visibility of security events by unifying logs across cloud, on-prem, applications, and endpoints.
• Integrate new log sources and systems into SIEM platforms, ensuring consistent data quality and alerting.
• Mentor and guide two L1 analysts, acting as the senior escalation point for investigation and tooling queries.
• Bring curiosity and adaptability to work with less-common or “odd” security tools found in diverse MSP environments.

What We’re Looking For

• Industry certifications such as Security+, ISC2 CC, Cisco, or equivalent.
• Progress toward Microsoft security certifications: AZ-900, SC-200, SC-500 (SC-100 ideal).
• 3+ years of technical cyber security experience, preferably in an MSP, Enterprise SOC, or consultancy.
• Hands-on experience with Microsoft Sentinel, Defender, Purview, and XDR.
• Broad SIEM capability: ideally Microsoft Sentinel or Splunk—and able to go beyond dashboards to build detections, correlations, and meaningful insights.
• Experience centralising log sources and onboarding new tools and data feeds into a SIEM/SOAR platform.
• Strong understanding of threat hunting methodologies, vulnerability management, and incident response.
• Knowledge of frameworks: ISO27001, NIST CSF, SOC2, Cyber Essentials Plus.
• Comfortable adapting to unfamiliar tooling and integrating new technologies quickly.

Why Join?

• Work at the cutting edge of security in a global MSP with enterprise clients and complex estates.
• Move beyond “keeping the lights on” — contribute to strategy, tooling improvement, and advanced threat detection.
• Career pathways into senior engineering, incident response leadership, or architecture roles.
• Ongoing funded training and certification investment.
• Opportunity to cross-train into wider InfoSec disciplines including GRC, Zero Trust, and compliance.
• Training to CISSP in year one.