Cyber Security Analyst - Microsoft Security / IAM - Contract

We’re looking for an experienced Cyber Security Analyst to join a highly innovative organisation in Bristol on an initial 3-month contract.

You’ll join an established IT and Security function, helping to protect a complex technology environment and improve the organisation’s overall security posture.

The biggest focus for this role is Identity & Access Management within the Microsoft ecosystem, so we’re looking for somebody with strong hands-on knowledge of Entra ID / Azure AD, Conditional Access, MFA and RBAC, alongside experience working with Microsoft Sentinel.

What you’ll be doing

• Supporting and improving Identity & Access Management across the organisation
• Working with Entra ID, MFA, Conditional Access and RBAC
• Using Microsoft Sentinel to monitor and investigate security events and incidents
• Writing and working with KQL queries
• Investigating suspicious activity, security incidents and emerging threats
• Supporting vulnerability management and remediation activity
• Working across the wider Microsoft security ecosystem
• Identifying opportunities to improve the organisation’s overall security posture
• Acting as a security escalation point for the wider IT team
• Working alongside internal teams and third-party security providers
• Supporting security projects, audits and compliance activity
• Producing clear recommendations following security investigations

The key requirement is strong practical experience across Microsoft Identity and Security.

Ideally you’ll have experience with:

• Microsoft Entra ID / Azure AD
• Identity & Access Management (IAM)
• Conditional Access
• Multi-Factor Authentication (MFA)
• Role-Based Access Control (RBAC)
• Microsoft Sentinel
• KQL / custom SIEM queries
• Microsoft 365 / Microsoft security technologies
• Security incident investigation and remediation
• Vulnerability management
• Network and infrastructure security
• Windows and Linux environments

Knowledge of areas such as Microsoft Defender, PIM/PAM, MITRE ATT&CK, ISO27001, NIST, Cyber Essentials Plus and Industrial/IoT security would also be useful, but we’re far more interested in your hands-on experience than a long list of certifications.

3-Month Contract | Inside IR35 Bristol / Hybrid - Ideally 1-2 days per week onsite Microsoft Sentinel | Entra ID | IAM | Conditional Access | MFA | RBAC