Microsoft Security Operations Centre Analyst

Salary: £50,000 - 80,000 per year

Requirements:

• We require security clearance.
• We are looking for experience with Microsoft Sentinel and ServiceNow.
• We expect strong analytical skills and the ability to investigate escalated alerts and incidents using contextual judgment.
• We require experience working across multiple data sources, including SIEM, EDR/XDR, identity and authentication telemetry, and cloud/SaaS platforms.
• We expect familiarity with incident response procedures, playbooks, and client-specific requirements.
• We require the ability to work effectively in a 24/7 shift rota.
• We value clear documentation, accurate handover notes, and a strong focus on investigation quality.

Responsibilities:

• We investigate escalated alerts and incidents that require human judgment, contextual understanding, and analytical depth.
• We validate threats, scope impact, and determine severity through contextual analysis.
• We work across multiple data sources, including SIEM, EDR/XDR, identity and authentication telemetry, and cloud and SaaS platforms.
• We coordinate and execute response actions in line with defined playbooks, client-specific requirements, and incident response procedures.
• We maintain clear, high-quality investigation documentation and handover notes.
• We operate as part of a 24/7 shift rota.
• We maintain accountability for investigation accuracy and quality.
• We escalate complex or ambiguous cases to Tier 3 appropriately.
• We provide structured feedback into detection tuning, alert quality improvements, and automation optimisation.
• We contribute to platform improvement activities when operational demand allows, including identifying repeatable investigation patterns, supporting automation opportunities, refining playbooks, and recommending detection logic tuning.

Technologies:

• Cloud
• Security
• ServiceNow

More:

We operate a next-generation, intelligence-led Security Operations Centre designed to deliver high-quality, scalable 24/7 security monitoring and response. We are hiring a Tier 2 Microsoft Security Operations Centre Analyst for our preferred Newcastle location. This role sits within our SOC Analyst team and supports continuous service coverage while also contributing to detection improvement, automation feedback, and service optimisation when operational demand allows.

last updated 34 week of 2026