Security Analyst

About the role

A threat focused analyst role in a managed security department, watching client environments for security events and helping to identify and escalate real threats. You support incident response and clear client communication.

What you will do

• Watch and examine security events across network, endpoint and cloud systems using Elastic SIEM
• Check and confirm incidents such as malware, phishing and unauthorised access attempts
• Triage, classify and rank alerts by impact and severity
• Help incident response by gathering evidence, escalating serious threats and aiding containment
• Link logs and events from firewalls, IDS/IPS, servers, endpoints and cloud platforms to find compromise signs
• Build and tune detection rules, dashboards and alerts, and document investigations and findings

What they look for

• Strong analysis, problem solving, communication and technical writing skills
• Able to explain risks and recommendations to technical and non technical audiences
• Experience monitoring and responding to incidents in a SOC or security operations setting
• Hands on work with Elastic SIEM or similar platforms for monitoring, alerting and log analysis
• Understanding of incident triage, threat detection, alert management and escalation

Nice to have

• Two or more years in cybersecurity, security operations, threat detection or incident response