Security Operations Analyst- UK

Role overview

Investigate and respond to security alerts as part of a security operations center protecting organizations from cyber threats. The analyst examines endpoint, log, forensic, and cloud productivity data to understand incidents, recommend remediation, and help improve detection and response practices. The position is remote in the UK.

Responsibilities - Triage alerts and investigate suspected intrusions, identifying likely causes and response actions. - Review endpoint detection telemetry, logs, and forensic artifacts; conduct tactical malware analysis. - Investigate suspicious activity in Microsoft 365 and advise on remediation. - Help resolve threat-related escalations from product support colleagues. - Contribute to detection engineering by developing and tuning detections. - Share investigative knowledge and support improvements to analyst and partner outcomes.

Requirements - At least 2 years of experience in a security operations or digital forensics and incident response role. - Practical familiarity with Windows, Linux, and macOS attack surfaces and common attacker techniques, including persistence, lateral movement, and defense evasion. - Understanding of static and dynamic malware analysis. - Working knowledge of Windows or enterprise domain administration, including Active Directory, Group Policy, and domain trusts. - Foundational networking knowledge, including ports, protocols, NAT, IP addressing, and VLANs, plus web server and application concepts. - Clear communication with technical and nontechnical audiences, customer focus, and curiosity about learning.

Nice to have

Experience in a managed service or detection and response environment; Linux or macOS investigations; scripting; cloud investigations; familiarity with remote monitoring tools; or participation in hands-on security labs or competitions.

Benefits and work setup

Remote work in the UK. The source lists personal leave, pension, a home office setup allowance, a monthly digital reimbursement, access to professional coaching, and travel to the United States for company events once or twice a year.