> Markdown version of [/jobs/ext/3293005-3rd-line-security-analyst-hybrid-reading-sentinel-defender-xdr-crowdstrike](https://www.wearedevelopers.com/jobs/ext/3293005-3rd-line-security-analyst-hybrid-reading-sentinel-defender-xdr-crowdstrike). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # 3rd Line Security Analyst - Hybrid - Reading Sentinel Defender XDR CrowdStrike - **Company:** Global Technology Solutions Ltd. - **Location:** Reading, UK - **Experience:** Expert - **Salary:** £50,000.0 - £60,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Amazon Web Services, Microsoft Azure, Cloud Computing, Cyber Security, Python (Programming Language), Windows PowerShell, Kusto Query Language, Computer Network Technologies, Mitre Att&ck, Malware, Firewalls (Computer Science), Microsoft InTune, Cybercrime, Cyber Warfare, Operating System Security, Vulnerability Analysis - **Published:** September 30, 2026 - **Apply:** https://www.reed.co.uk/jobs/3rd-line-security-analyst-hybrid-reading-sentinel-defender-xdr-crowdstrike/57406553 ## About the Role · Substantial SOC, cyber operations or security engineering experience. · Hands-on Sentinel, Defender XDR and CrowdStrike expertise. · Incident response, malware analysis, forensics and threat hunting. · Advanced KQL; PowerShell and/or Python automation. · Entra ID, Conditional Access, Intune and Microsoft 365 security. · Cloud and networking knowledge; MITRE ATT&CK, NIST and SANS frameworks. · CISSP desirable., * Communication Skills (Key) * Health and Safety Principles * Incident Response * Infrastructure Management * Next-Generation Firewalls * Operating System Security * Risk Analysis * Security Incident & Event Management * Self-Motivation * Vulnerability Assessment ## Description Senior technical authority in Security Operations, improving security engineering, detection and response while supporting the wider team. · Lead serious incidents, forensic investigations and root cause analysis. · Develop detections, automation and orchestration; conduct proactive threat hunting. · Engineer Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune and Darktrace. · Support Microsoft 365, Azure, AWS, identity and endpoint security. · Maintain documentation, support compliance and mentor colleagues. ## Related Videos - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Full Spectrum File Uploads](https://www.wearedevelopers.com/videos/870-full-spectrum-file-uploads) ## Related Articles - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)