2 of 2 Security Analytics Jobs in the South West

Directorate's purpose of delivering the best care and outcomes for the NHS. The Cyber Operations sub-directorate consists of four operational areas: Cyber Security Operations Unit (CSOU & SIO) Cyber Delivery Unit (CDU) Cyber Improvement Programme Chief Information Security Office Function (CISO) This role is for a Cyber … Security Analyst in the Infrastructure and Networks teams within the Protective Monitoring area of the national CSOC. This is a Tier 2 role working with the Infrastructure and Networks team to help develop and improve existing analytical rules plus supporting Tier 1 junior analysts with triage and incident handling. ...

focus on the engineering, optimisation and strategic development of Endpoint Detection and Response (EDR) and Extended Detection and Response (XDR) platforms, helping to strengthen security visibility, detection and incident response across enterprise, cloud and hybrid environments. Key Responsibilities: Act as the technical subject matter expert for Microsoft Defender … maintain high-fidelity detection content across EDR, XDR and SIEM platforms, including Microsoft Sentinel Support SOAR integration and automation to improve incident response and security operations Conduct advanced threat hunting and investigations using KQL and Defender Advanced Hunting Align detection logic with the MITRE ATT&CK framework, threat intelligence ...