Protect customers. Respond with precision. Help shape the future of our SOC. Intercity is looking for a driven and detail-oriented Security Operations Analyst to join our growing Security Operations Centre (SOC). This is a hands-on role at the heart of our security services, where youll be responsible for monitoring, analysing, and responding to security incidents for our customers using Microsofts leading security technologies. Youll work closely with senior analysts and engineers, playing a key role in incident response while also contributing to the continuous improvement and evolution of our SOC services. About The Role As a Security Operations Analyst, you will: Provide day-to-day monitoring and initial response for SOC customers in line with Intercitys Security Incident Response Framework. Investigate alerts generated by Microsoft Sentinel and Microsoft Defender for 365, identifying true positives and responding appropriately. Analyse multiple security data sources to detect malicious activity and support containment actions. Communicate clearly and professionally with customers and third parties where security risks are identified. Work with Senior Security Analysts to identify threat patterns and recommend strategies to reduce risk across customer environments. Contribute to the ongoing development of the SOC service through: Tuning detection rules within Microsoft Sentinel Improving automation and ticket workflows Identify vulnerabilities within Microsoft Defender 365 and support customers in improving their overall security posture. Essential Experience & Knowledge: Strong, demonstrable experience with: Microsoft Azure Microsoft Sentinel Microsoft Defender for 365 Proven experience investigating and responding to security incidents. Solid understanding of Microsoft cloud security controls, tools, and technologies. Ability to analyse cloud security risks and recommend appropriate controls. Desirable Experience: Understanding of Log Ingestion and Log Analytics. Familiarity with the MITRE ATT&CK framework. Certifications: Essential Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) Microsoft Certified: Security Operations Analyst (SC-200) Desirable Microsoft Certified: Identity and Access Administrator Associate (SC-300) Microsoft Certified: Administering Information Security in Microsoft 365 (SC-401) Microsoft Certified: Azure Administrator (AZ-104) Skills & Behaviours Takes ownership with a can-do attitude. Calm and methodical in high-pressure situations. Strong attention to detail and analytical thinking. Amiable, flexible, and collaborative team player. What We Offer: 33 days holiday (inclusive of bank holidays), with entitlement increasing by one day for each full calendar year employed, up to a maximum of five days. Annual pay reviews. Holiday buy scheme. All-company bonus scheme. Death in service cover. Employee assistance programme. Company pension. Active social calendar. A strong focus on developing our people. About The Company Intercity Technology provides reliable and secure technologies in communications, cloud, and managed services, with a big difference Intercity is a technology solutions partner that isnt all about tech. Its about a great bunch of people combining their passion, expertise, and dedication to deliver extraordinary results for businesses. Our vision is to be the best technology partner to work for and with we are really proud of our achievements so far: Customer Net Promoter Score of 92 Gold Award Investors in People Accreditation 3-star World Class Best Companies accreditation, and for 2022, 2023, and 2024: - The no. 1 best telecoms company to work for - 9th best mid-sized company in the UK to work for! - 7th best company in the West-Midlands to work for! Platinum Eco Vadis rating We select candidates with the right skills, experience, and values to join us and selection is based on a fair and equal process. Were proud to be committed to equal opportunities and welcome all applications. As a specialist in secure technology solutions, all successful candidates will be subject to pre-employment checks, so we can ensure compliance with our ISO27001 (Information Security) and Cyber Essentials Plus certifications. We are committed to using any personal information you may give us in a secure and proper manner, for more information please see our privacy policy on our website.