Security Analyst

Job Title: Security Analyst We are seeking a proactive Information Security Analyst to support the protection, detection, and response capabilities of our security function, while driving continuous improvement across our security posture. This role is hands-on, working across modern security tools, cloud environments, and operational processes. Key Responsibilities: Monitor, analyse, and respond to security alerts, logs, and telemetry across SIEM (Microsoft Sentinel), EDR, network and DLP security platforms. Support detection and response activities, including incident triage, investigation, and remediation. Implement and manage Data Loss Prevention (DLP) controls, including policy configuration, tuning, and incident handling. Contribute to the development and maturity of the organisation’s security stack. Assist in coordinating penetration testing activities, including scoping, stakeholder engagement, and remediation validation. Maintain accurate documentation of incidents, risks, controls, and audit evidence to support governance and compliance. Conduct third-party security assessments, including questionnaires and documentation reviews. Work closely with external SOC providers and network/security partners. Evaluate and onboard new security technologies and tools. Support cyber security awareness programmes, tabletop exercises, and resilience planning. Ensure alignment with security standards and frameworks (e.g. ISO 27001, NIST). Key Skills & Experience: Hands-on experience with security tools (e.g. SIEM, EDR, vulnerability management, network security tools, query writing and alert tuning). Experience implementing and managing Purview DLP solutions Experience monitoring and responding to security events in cloud environments (AWS, Azure). Strong understanding of security operations, threat detection, and incident response. Knowledge of security standards and regulatory compliance requirements (ISO, NIST). Experience with third-party risk management and supplier assurance. Familiarity with penetration testing processes and remediation tracking. Understanding of network security principles, including in cloud-based environments. Experience with OT (Operational Technology) and physical security is advantageous.