3rd Line Security Analyst - Hybrid - Reading Sentinel Defender XDR CrowdStrike

3rd Line Security Analyst
Location: Reading - Hybrid, three office days and two home days (Month 1 full time in the office)
Salary: £50,000 - £60,000

Role and responsibilities

. Senior technical authority in Security Operations, improving security engineering, detection and response while supporting the wider team.

Lead serious incidents, forensic investigations and root cause analysis.

Develop detections, automation and orchestration; conduct proactive threat hunting.

Engineer Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune and Darktrace.

Support Microsoft 365, Azure, AWS, identity and endpoint security.

Maintain documentation, support compliance and mentor colleagues.

Substantial SOC, cyber operations or security engineering experience.

Hands-on Sentinel, Defender XDR and CrowdStrike expertise.

Incident response, malware analysis, forensics and threat hunting.

Advanced KQL; PowerShell and/or Python automation.

Entra ID, Conditional Access, Intune and Microsoft 365 security.

Cloud and networking knowledge; MITRE ATT&CK, NIST and SANS frameworks.

CISSP desirable.

25 days holiday, holiday trading, volunteer day, pension, life assurance, employee assistance, mentoring, eye care, flu vaccination and Costco eligibility.