3rd Line Security Analyst - Reading Sentinel Defender XDR CrowdStrike

Senior technical authority in Security Operations, improving security engineering, detection and response while supporting the wider team.

· Lead serious incidents, forensic investigations and root cause analysis.

· Develop detections, automation and orchestration; conduct proactive threat hunting.

· Engineer Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune and Darktrace.

· Support Microsoft 365, Azure, AWS, identity and endpoint security.

· Maintain documentation, support compliance and mentor colleagues.

· Substantial SOC, cyber operations or security engineering experience.

· Hands-on Sentinel, Defender XDR and CrowdStrike expertise.

· Incident response, malware analysis, forensics and threat hunting.

· Advanced KQL; PowerShell and/or Python automation.

· Entra ID, Conditional Access, Intune and Microsoft 365 security.

· Cloud and networking knowledge; MITRE ATT&CK, NIST and SANS frameworks.

· CISSP desirable.

25 days holiday, holiday trading, volunteer day, pension, life assurance, employee assistance, mentoring, eye care, flu vaccination and Costco eligibility.