Security Analyst x 2 - £500-£600 per day - Inside IR35 - Primarily Remote - 3 months initial contract.
My client, one of the UKs largest producers of zero carbon energy, is looking for two experienced Security Analysts to join them to join their Cyber Defence team, responsible for identifying, investigating, and mitigating cyber threats.
The ideal candidate will have experience with Microsoft Sentinel, firewall security (Palo Alto & Fortinet), threat hunting, and incident response. A solid understanding of Microsoft Defender, KQL queries, and AWS Guard Duty is also required. SC-cleared candidates will be given preference due to the nature of the work.
Key Responsibilities
Security Monitoring & Incident Response
Monitor, analyse, and investigate security events using Microsoft Sentinel.
Respond to alerts from external SOC teams, ensuring swift resolution of security incidents.
Conduct threat analysis using Microsoft Defender, KQL queries, IDS alerts, and network traffic logs.
Perform incident triage and escalation, ensuring timely response to high-severity threats.
Investigate phishing emails, malware incidents, and suspicious activity.
Firewall Security & Network Defence
Analyse firewall logs and network traffic to detect and mitigate threats.
Utilise Palo Alto Panorama, Prisma, and Fortinet security tools for threat investigation.
Implement firewall rule changes to strengthen network security.
Investigate Indicators of Compromise (IOCs) and apply threat intelligence to firewall security.
Cloud & Endpoint Security
Monitor AWS Guard Duty for security threats, escalating incidents as necessary.
Conduct threat-hunting activities across Microsoft 365 and cloud environments.
Develop and fine-tune security detections, playbooks, and automation workflows in Sentinel.
Collaboration & Continuous Improvement
Work closely with IT and security teams to enhance cyber defence strategies.
Mentor and support junior analysts and cyber apprentices.
Assist in the delivery of SOC security projects and incident response improvements.
Promote cybersecurity best practices across the organisation.
Essential Skills & Experience
Microsoft Sentinel for security monitoring, investigation, and response.
Firewall security expertise with Palo Alto and Fortinet (monitoring, analysis, rule management).
Incident Response & Threat Hunting experience.
Strong proficiency in Microsoft Defender and KQL queries.
Familiarity with AWS Guard Duty and cloud security best practices.
Hands-on experience investigating phishing, malware, and network security events.
Experience using ServiceNow for incident management.
Desirable Skills
SC clearance (preferred) or willingness to obtain.
Experience with Data Loss Prevention (DLP) tools and eDiscovery scans.
Familiarity with Microsoft Purview and threat intelligence platforms
