IT Security Analyst

Role Overview You will strengthen the organisation’s cyber defence capability across enterprise and regulated environments, focusing on Cybersecurity Analysis & Detection, Incident Management and Crisis Management. You will monitor, analyse and respond to threats, working closely with IT, compliance and business stakeholders to reduce risk and improve security posture., * Perform security monitoring and triage using SIEM/EDR tooling; investigate suspicious activity and validate alerts.

• Lead and support incident response activities, including containment, eradication, recovery and post-incident lessons learnt.
• Handle Priority 1 security incidents and contribute to crisis communications and decision-making under pressure.
• Develop and tune detection use-cases, correlation rules and threat-hunting hypotheses; reduce false positives.
• Conduct root cause analysis, document evidence, timelines and actions; produce clear incident reports for technical and non-technical audiences.
• Collaborate with infrastructure, cloud and application teams to remediate vulnerabilities and harden systems.
• Support security governance in regulated settings (eg, GxP considerations), ensuring procedures are followed and auditable.
• Contribute to continuous improvement of playbooks, runbooks, response plans and tabletop exercises.

On-Call Duty On-call duty according to a rotation system of approximately one week every 3 to 4 weeks. During this period, you may be assigned to handle Priority 1 security incidents, among other things.

• Proven experience in SOC, security operations or incident response roles.
• Strong knowledge of attacker techniques (MITRE ATT&CK), malware behaviour, phishing, identity compromise and lateral movement.
• Hands-on experience with SIEM (eg, Splunk, Sentinel, QRadar) and EDR/XDR platforms.
• Understanding of networking (TCP/IP, DNS, HTTP/S), Windows and Linux security, and logging/telemetry.
• Experience with cloud security monitoring (Azure/AWS) and identity platforms (eg, Azure AD/Entra).
• Ability to manage incidents end-to-end, including stakeholder management, prioritisation and crisis coordination.
• Familiarity with security standards and best practice (eg, ISO 27001, NIST) and working in regulated industries.
• Excellent documentation and communication skills; able to explain risk clearly in British English.

By applying for this role, you consent to SGI contacting you by telephone regarding recruitment services, market updates, and relevant business opportunities

Source Group International Ltd is acting as an Employment Business in relation to this vacancy