> Markdown version of [/jobs/ext/4016753-senior-security-operations-analyst](https://www.wearedevelopers.com/jobs/ext/4016753-senior-security-operations-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Security Operations Analyst

- **Company:** Forward Role Recruitment
- **Location:** Manchester, UK
- **Experience:** Expert
- **Salary:** £55,000.0 - £65,000.0
- **Contract:** Contract
- **Skills:** Cloud Computing, Cyber Security, DevOps, Event Logging, Intrusion Detection Systems, Information Systems Security Architecture Professional, Network Security, Logical Security, Security Information and Event Management, Data Streaming, Cyber Threat Analysis, Firewalls (Computer Science), Cybercrime, Microsoft Sentinel, Windows Security, Splunk
- **Published:** October 30, 2026
- **Apply:** https://www.totaljobs.com/job/senior-information-security-analyst/forward-role-job108257139

## About the Role

* Hands-on SIEM experience with Chronicle / Google SecOps, Splunk or Microsoft Sentinel, and a good working knowledge of event log data.
 * Solid understanding of firewalls, IDS/IPS and Windows Security Event Logs.
 * Knowledge of cloud infrastructure fundamentals alongside traditional technologies.
 * Ability to quickly understand existing infrastructure, network security principles, data flows and security architectures.
 * A proactive approach to identifying control weaknesses and vulnerabilities.
 * Strong written and verbal communication, able to explain complex technical risk in plain business terms.
 * A sense of ownership, with the confidence to spot what needs doing while working well in a team.

## Description

You'll protect key business assets by monitoring, detecting, analysing and responding to security incidents, owning threat detection and incident response at real scale., * SIEM ownership: Oversee the day-to-day running of the SIEM, working closely with Infrastructure, Networks, DevOps and an outsourced SOC.

 * Detection rules: Define and fine-tune SIEM rules, and investigate alerts and incidents through to completion.
 * Incident response: Gather and analyse data, then contain and respond to cyber security incidents as part of a dynamic monitoring and response capability.
 * Threat intelligence and hunting: Gather threat intelligence from multiple sources, coordinate threat hunting, spot trends and attacks, and plan mitigation and remediation.
 * Escalation and remediation: Raise problems, escalate through the right channels and track them through to resolution.
 * EDR: Manage Endpoint Detection and Response day to day.
 * Policy and control design: Help design, manage and document security policies, standards and processes, and design effective test methods for logical security controls.
 * Staying current: Keep up with the latest threats, best practice and technology developments.