Threat Intelligence Analyst

Threat Analyst / SOC / Microsoft Sentinel / KQL / SIEM

Threat Analyst / SOC / Microsoft Sentinel / KQL / SIEM

Threat Analyst – Manchester/Hybrid - £30K

Maxwell Bond have engaged with an MSSP in the Manchester area that’re looking for a Threat Analyst to join their team. We’re looking for somebody that has recent experience with Microsoft Sentinel (1-2 years) and KQL skills. The company are growing and hiring at a quick rate, really exciting time to join them as they expand.

You will be in the Manchester based office ideally once per week, sometimes maybe once every two weeks.

What you’ll be doing:

• Investigating and responding to security alerts and incidents escalated by the L1 team
• Using Microsoft Sentinel as your primary SIEM platform, leveraging KQL to hunt, analyse, and improve detection
• Tuning Sentinel rules, creating workbooks and queries to enhance visibility and reduce false positives
• Working with clients across different sectors, helping them understand threats and improve their security posture
• Collaborating with Threat Intelligence and Engineering teams to strengthen detection and response capabilities

What we’re looking for:

• Solid experience working with Microsoft Sentinel in a live SOC environment
• Strong knowledge and hands-on ability with KQL (Kusto Query Language)
• Understanding of attack techniques (MITRE ATT&CK, etc.) and incident response workflows
• Comfortable working across different client environments and adapting to varied threat landscapes
• Previous experience in an MSSP or managed services environment is an advantage

Job details:

• Salary up to £30,000
• Hybrid working – once a week in the office
• Clear progression opportunities and exposure to a wide range of threat landscapes
• Work as part of a supportive, growing SOC team with real investment in tooling and training
• If you're ready to take the next step in your threat analysis career and want to be part of a team that makes a real difference, apply now.

We’re expecting a large amount of interest in this role with interviews taking place towards the end of the week, please apply now to be considered or alternatively contact Dan Rowland at Maxwell Bond on or

Threat Analyst / SOC / Microsoft Sentinel / KQL / SIEM

Threat Analyst / SOC / Microsoft Sentinel / KQL / SIEM