> Markdown version of [/jobs/ext/3848131-security-analyst-2nd-line](https://www.wearedevelopers.com/jobs/ext/3848131-security-analyst-2nd-line). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Analyst 2nd Line

- **Company:** gb
Transparity
- **Location:** Newcastle upon Tyne, United Kingdom (Remote available)
- **Contract:** Permanent contract
- **Skills:** Cloud Computing, Cyber Security, Linux, Desktop Environments, Intrusion Detection and Prevention, Microsoft Security Essentials, Windows Servers, Network Architecture, Networking Basics, Network Diagrams, Windows PowerShell, Azure Active Directory, Kusto Query Language, Security Information and Event Management, Cyber Threat Analysis, Firewalls (Computer Science), Microsoft InTune, Performance Monitor, Microsoft Sentinel, Vulnerability Analysis
- **Published:** October 21, 2026
- **Apply:** https://www.totaljobs.com/job/security-engineer/transparity-job108174208

## About the Role

* Proven experience working within a Security Operations Centre (SOC), with a strong understanding of incident response and security operations.
 * Hands-on expertise across the Microsoft security stack, including Microsoft Entra, Defender for Cloud, Defender XDR and Intune.
 * Strong knowledge of Windows Server and desktop environments, with Linux experience beneficial.
 * Solid understanding of networking principles and security technologies, including firewalls, WAFs, application gateways and network infrastructure.
 * Experience using Kusto Query Language (KQL) and PowerShell to investigate, automate and improve security operations.
 * Ability to create clear technical documentation, including security playbooks, processes and network diagrams.
 * Self-motivated and organised, with the ability to prioritise effectively, perform under pressure and deliver against customer and business deadlines.

Disability Confident

Transparity have a proactive attitude when it comes to looking after the wellbeing and inclusion of all our employees. We promote equal opportunities through our recruitment process and a positive, inclusive culture across the business which we are proud of. We are diverse in our approach to recruitment and recognise that talent comes in all different forms. The diversity in our team is what helps our business work so well.

## Description

Within the role you will be responsible for performing the day-to-day maintenance of the Security Operations Centre. These responsibilities will include proactive monitoring of customer's security posture as well as reactive actions to control a breach should this occur. Typical tasks will include triage and remediation of SIEM (Microsoft Sentinel) incidents and alerts, threat intelligence and research, system hardening, and documenting customer's infrastructure and assets. Technical product and process knowledge needs to be accompanied by excellent customer service skills, and meticulous attention to detail.

This role will be hybrid, with the team working a mixture of from home as well as on-site in Newcastle Upon-Tyne.

Main Duties and Responsibilities

 * Taking the lead on investigating and responding to security incidents, carrying out forensic analysis and driving issues through to resolution.
 * Proactively monitoring customer environments, threat hunting, and identifying risks before they become problems.
 * Conducting vulnerability assessments and helping customers strengthen their security posture through effective remediation.
 * Collaborating with Senior Security Analysts to support threat intelligence, research, and the continuous improvement of detection capabilities.
 * Providing technical guidance and mentoring to junior SOC analysts, while acting as an escalation point for complex security issues.
 * Working closely with Service Desk and Customer Success teams to deliver excellent customer outcomes, clear communication, and high levels of satisfaction.
 * Helping shape and mature SOC processes, contributing to service improvements, customer reporting, and operational best practice.