Security Analyst

The opportunity

Join us at the forefront of cyber defence, where you'll play a critical role in protecting our business from evolving threats. You'll proactively monitor, investigate and respond to security incidents using Microsoft Sentinel, Microsoft Defender and leading EDR technologies, working closely with our SIEM partner to identify and neutralise risks before they impact the organisation. Leading end-to-end incident response, you'll drive containment, recovery and root cause analysis while continuously strengthening our security posture by enhancing runbooks, response playbooks and operational processes. This is an opportunity to make a tangible impact in a fast-paced environment where your expertise will shape and mature our cyber resilience.

About Kubrick

We're an award-winning consultancy that helps organizations design, build and scale data and AI solutions that deliver lasting impact. We work with organizations across industries including financial services, healthcare, retail, energy, aviation, and the public sector, and partner with leading technology providers such as Microsoft, Snowflake, Databricks, and Collibra. Our status as a Gold Databricks Partner and an Elite Snowflake AI Data Cloud Services Partner means our people work at the cutting edge of these platforms, opening doors to specialist projects, accreditations, and career opportunities you won't find everywhere. We're also just as committed to building an inclusive industry. We're proud long-standing partners of Women in Data, a not for profit dedicated to helping more women succeed in data and AI, recognized in 2026 with a shortlisting for their Brand Partner of the Year award. Our work in this space has also been recognized by SheCanCode and Women in Tech.

What You'll Be Doing

Hands-on, Security Analyst role within Kubrick, focused on protecting our internal environment while delivering key security implementations. You'll also provide occasional internal IT support and client assurance activities including RFPs and security questionnaires.

Lead our Security Operations capability, proactively monitoring, triaging and investigating security alerts through Microsoft Sentinel, Microsoft Defender and EDR technologies, working closely with our SIEM partner to identify and respond to emerging threats

Own end-to-end incident response, leading containment, eradication, recovery and post-incident reviews to ensure lessons learned drive continuous improvement

Develop and enhance security operations, maintaining runbooks, response playbooks and operational documentation that enable a scalable and resilient security function

Drive key cyber security projects, implementing and optimising security controls across the Microsoft security ecosystem, including:

Microsoft Purview – Data Loss Prevention (DLP), data classification, sensitivity labels and information protection

Microsoft Defender – Configuration, policy management and optimisation across endpoints, identity and cloud environments

Microsoft Intune & BYOD – Device compliance, Mobile Application Management (MAM), Windows Autopilot, device provisioning and secure Bring Your Own Device programmes.

Cloud Security – Strengthening security controls, identity governance and CASB policies across Microsoft Azure and Microsoft 365

Automation & Scripting – Developing PowerShell solutions to automate security operations, reporting and configuration management

Own our vulnerability management programme, overseeing vulnerability scanning, risk assessment, remediation prioritisation and reporting to reduce organisational risk

Strengthen organisational resilience, supporting the development, testing and continuous improvement of Business Continuity and Disaster Recovery plans through exercises and simulations

Champion security governance and compliance, maintaining our Information Security Management System (ISMS) in line with ISO 27001, NIST and Cyber Essentials Plus, while supporting internal and external audits

Partner with clients and the wider business, contributing to security due diligence, client questionnaires, RFPs and tender responses, demonstrating our commitment to security excellence

What We're Looking For

Solid foundation within cybersecurity or IT role with hands-on security project or implementation experience

CISM, CISSP

Microsoft security stack: Defender, Purview, Intune, Entra ID, Sentinel, and M365 services

Hands-on experience with AI/ML security challenges, including attack vectors like prompt injection, model poisoning, and data exfiltration via LLMs, as well as applying security controls to AI-integrated environment

Vulnerability management experience including remediation tracking

Strong understanding of DLP, data classification, and information protection

Experience with BYOD management and mobile device/application security

Cloud security knowledge across Azure and M365

Familiarity with frameworks: ISO 27001, NIST, Cyber Essentials

PowerShell scripting for automation and security tasks

Strong written communication skills for both technical and non-technical audiences

Desirable Skills

BCP/DR planning and testing experience

Hands-on or managed penetration testing experience

Familiarity with PAM, SSO, or CASB solutions

Python or additional scripting experience

Relevant certifications: SC-200, AZ-500, CompTIA Security+

Benefits

Enhanced paid maternity, paternity and adoption leave, above the statutory minimum, with shared parental leave options

Additional family leave support, including up to 18 weeks parental leave, 5 days dependent care leave, paid fertility treatment leave, and up to 3 weeks paid parental bereavement leave

33 days annual leave (25 days annual leave plus 8 public holidays)

Flexible working options, including flexible start and finish times and part-time arrangements, available upon request

Hybrid working - choose to work from home, the Kubrick office, or your clients' office (if applicable)

Pension matching up to 5%

Unlimited mental health support through Help@Hand, available 24/7 for you and eligible family members

Financial wellbeing support

Cycle to Work scheme, save up to 43% on a new bike through Evans Cycles

Specsavers eye care vouchers

Internal mobility and career development opportunities

Recognition and reward programs

Learning and development opportunities, including professional certifications

Employee Assistance Program (EAP)

Mental health, diversity and inclusion support

Diversity & Inclusion

We encourage applications from women and people from all underrepresented backgrounds in data and AI, including racial and ethnic minorities, LGBTQ+ people, people with disabilities, and people who are neurodivergent. If you need any adjustments during the recruitment process, at any stage, for any reason, just let us know. We're here to support you.

#J-18808-Ljbffr