3rd Line Security Analyst - Hybrid - Reading Sentinel Defender XDR CrowdStrike

3rd Line Security Analyst

Location: Reading

• Hybrid, three office days and two home days (Month 1 full time in the office)

Salary: £50,000 - £60,000

Role and responsibilities

Senior technical authority in Security Operations, improving security engineering, detection and response while supporting the wider team.

Lead serious incidents, forensic investigations and root cause analysis.

Develop detections, automation and orchestration; conduct proactive threat hunting.

Engineer Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune and Darktrace.

Support Microsoft 365, Azure, AWS, identity and endpoint security.

Maintain documentation, support compliance and mentor colleagues.

Experience and qualifications

Substantial SOC, cyber operations or security engineering experience.

Hands-on Sentinel, Defender XDR and CrowdStrike expertise.

Incident response, malware analysis, forensics and threat hunting.

Advanced KQL; PowerShell and/or Python automation.

Entra ID, Conditional Access, Intune and Microsoft 365 security.

Cloud and networking knowledge; MITRE ATT&CK, NIST and SANS frameworks.

CISSP desirable.

Benefits

25 days holiday, holiday trading, volunteer day, pension, life assurance, employee assistance, mentoring, eye care, flu vaccination and Costco eligibility.