> Markdown version of [/jobs/ext/2107580-senior-security-analyst](https://www.wearedevelopers.com/jobs/ext/2107580-senior-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Security Analyst - **Company:** Xact Placements - **Location:** Reading, UK - **Experience:** Expert - **Salary:** £50,000.0 - £60,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Application Programming Interfaces (APIs), Amazon Web Services, Microsoft Azure, Cyber Security, Intrusion Detection and Prevention, Python (Programming Language), Security Information and Event Management, Microsoft Power Automate, Mitre Att&ck, Microsoft Sentinel, Security Orchestration, Automation & Response - **Published:** August 19, 2026 - **Apply:** https://www.cv-library.co.uk/job/225457509/senior-security-analyst ## About the Role * Solid experience in a Security Operations or SOC environment * Hands-on experience with SIEM, EDR and SOAR platforms * Proven detection engineering and SIEM rule-tuning experience * Strong grasp of MITRE ATT&CK and similar threat frameworks * Experience automating processes with Python, Logic Apps or APIs * Comfortable investigating incidents across cloud, identity and endpoint environments * Experience with platforms like Microsoft Sentinel, Defender XDR, CrowdStrike or similar * Knowledge of Azure/AWS security monitoring * Understanding of ISO 27001 and Cyber Essentials * CISSP or similar certification desirable but not essential ## Description We're working with a well-established managed services organisation in Reading to find a Senior Security Analyst to join their growing SOC function. This is a hands-on role for someone who genuinely enjoys the detection-and-response side of security - not just monitoring alerts, but tuning the rules behind them, automating the boring bits, and hunting for the threats nobody's noticed yet. You'll be at the sharp end of incident response, working across SIEM, EDR and XDR platforms, with real ownership over the full incident lifecycle from triage through to closure. What you'll be doing: * Owning security incidents end-to-end - triage, investigation, remediation, closure * Running advanced investigations across SIEM, EDR and XDR platforms * Designing and tuning SIEM detection rules to cut down false positives * Mapping detection and response work against the MITRE ATT&CK framework * Building automated security workflows using tools like Logic Apps, Python and APIs * Proactively threat hunting using behavioural analytics and threat intelligence * Monitoring and responding to security events across Azure, Microsoft 365 and AWS * Investigating identity-based threats - suspicious sign-ins, privilege escalation, that kind of thing * Supporting endpoint security (EDR, AV, patching) * Acting as an escalation point for complex or high-risk incidents * Supporting ISO 27001 and Cyber Essentials compliance * Mentoring junior analysts and the wider service desk team ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure) - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)