Trident Search are looking for a Security Engineer/ L3 Security Analyst, you will be working alongside a MS deployment team and senior analysts to both help onboard customers as well as assist with major incidents.

Our client has gone from strength to strength over the past few years and focus on providing an in-depth service whilst using some of the latest technology.

This position can be fully remote, but travel into offices near the midlands is welcome.

Core business working hours of Mon – Fri 8:45 – 5:30 with possible requirement for paid overtime during IR’s etc.

Out of hours on-call to support the 24x7 SOC however this may not be required (15% on-call allowance)

Key skills/points we are looking for:

• Management of Microsoft Sentinel

• Strong ability to construct KQL queries

• Creation of new analytical rules using threat intel

• Maintenance of existing analytical rule sets

• Management or Syslog collectors (Linux skillsets)

• Management/troubleshooting of data sources & parsing of data

• Automation

• Creation/management of ARM templates to deploy Microsoft Sentinel and Cloud Resources

• Using Microsoft PowerApps and other resources such as Python to automate actions within analytical rules

• Experience with the management of SOAR functions within Microsoft Sentinel

• Experience building complex Workbooks within Microsoft Sentinel

• Incident Response/Investigations

• Assist with major incident responses

• Aid junior analysts with investigations where required

Benefits

• Comprehensive Benefits Package:

• Private Healthcare

• Flexible Working

• 33 days holiday, with the option to buy and sell days if desired

• Structured Personal Development

• Training and Experience with leading commercial solutions such as Azure Sentinel, Defender for Endpoint & Carbon Black.

• Paid Training Certifications

• Strong Career Advancement

• A strong team to learn with and to be part of with a culture that values each individual’s care.