Security Analyst — Leeds 🔐
Full-time · 24/7 shift patter
n
Microsoft Sentinel/ Defender XDR / KQL / Qualys / Incident Response / Threat Hunting / MITRE ATT&CK / Regulated environmen
tsWe're looking for a Senior Security Analyst to join a security operations team in Leeds — embedded on a dedicated client engagement in a regulated industry, owning detection, investigation, and response end-to-en
d.
This isn't a ticket-processing role. You'll run incidents from first alert through to remediation, carry out proactive threat hunting and vulnerability scanning when the queue is clear, and work directly with the client's IT and cloud teams to drive issues to resolution. You bridge ops and engineering — and you'll be expected to operate independent
ly.
What you'll be d
* oingOwn security incidents end-to-end — detection, investigation, containment, remediation coordina
* tionInvestigate using KQL in Microsoft Sentinel, correlating across endpoint, identity, cloud and net
* workMonitor and triage alerts from Microsoft Defender XDR (Endpoint, Identity, Cloud Apps, Cl
* oud)Run vulnerability scans (Qualys), web app scans, and breach & attack simulations (AttackIQ, XM Cy
* ber)Threat hunt using hypothesis-driven approaches aligned to MITRE ATT&am
* p;CKLiaise directly with client IT, cloud and workplace teams to chase remediation to comple
* tionMaintain audit-standard documentation in a regulated environment (ISO 27001, NIST, FCA, D
* ORA)Support the security engineering team during major incidents and platform cha
nges
What we're lookin
* g forSolid SOC experience — alert triage, incident investigation, and response in a production enviro
* nmentStrong KQL and Microsoft Sentinel skills — not just triage, full investigation and detection t
* uningHands-on with Microsoft Defender XDR across the full
* stackExperience in or supporting a regulated environment (financial services, CNI, govern
* ment)Comfortable navigating hybrid infrastructure (on-prem and cloud) beyond just the security to
* olingRelevant certifications a strong plus: SC-200, CySA+, GCIH, CEH, BTL1 or equiv
* alentNPPV / SC clearance eligibility req
uired
Shift pattern: 12-hour shifts, 4 on / 4 off — including nights, weekends and bank holidays. This is a 24/7 role. If shift work doesn't suit you right now, this probably isn't the right fit — but if you thrive in that rhythm, it's a great schedule once you're
in it.
Why th
* is roleOne of Europe's leading managed services and security providers — operating across 11+ co
* untriesSmall, senior team — real ownership and accountability from
* day oneMinimum 40 hours funded training per year, aligned to your deve
* lopmentFull benefits package — pension, healthcare, dental, gym discounts a
* nd moreBased in Leeds with a strong loc
al team
Interested? Apply via the link or drop a message directly — happy to have a chat before you apply. We're looking for people who want to own their work, not just process
alerts.