Threat Analyst 2

Role overview This Tier II Threat Analyst position is part of a Managed Detection and Response team that delivers 24/7 monitoring, detection, and response services across endpoint, network, email, identity, and cloud environments. The role focuses on proactive defence: investigating escalations from Tier I analysts, guiding incident handling, hunting threats across the customer base, and communicating findings to both technical and executive stakeholders. The work combines hands-on investigation, mentoring, and continuous improvement of security operations processes.

Responsibilities - Investigate and analyze logs and security-relevant events using enterprise tooling and endpoint collection systems to identify and neutralize threats. - Handle escalations from Tier I analysts, advising on investigation approach and guiding cases through to resolution. - Onboard and train new threat analysts, helping raise the overall capability of the team. - Create and track cases through to threat neutralization, communicating findings and follow-up actions to customer audiences ranging from technical operators to executives. - Provide recommendations that reduce risk in customer environments and follow up on open issues until they are resolved. - Research emerging indicators of compromise and attack, exploits, and vulnerabilities, and conduct proactive threat hunting across the MDR customer base. - Contribute to security operations process improvement and produce metrics that inform reporting on threat trends, intelligence, and situational awareness.

Requirements - Two or more years of experience in a SOC environment or within a computer security team in an IT setting. - Endpoint and network security experience, including working with intrusion detection and prevention systems, endpoint detection and response tooling, advanced threat protection, and malware defence. - Working knowledge of investigations, incident response, or threat hunting workflows in customer-facing or production environments. - Ability to communicate findings clearly in writing and verbally to technical and executive audiences.

Benefits and work setup - Remote-first working model, with the primary option being fully remote where the role is posted; candidates must have legal authorization to work in the listed jurisdiction without requiring visa sponsorship. - Employee-led diversity and inclusion networks, annual charity and volunteer days, global sustainability initiatives, fitness and trivia competitions, dedicated wellbeing days off, and monthly wellbeing webinars. - Inclusive hiring practices with reasonable adjustments available throughout the recruitment process on request.