{"id":2596677,"url":"https://alion.io/job/lrqa-24-x-7-security-analyst","title":"24 x 7 Security Analyst","company":{"id":1756963,"name":"LRQA","domain":"lrqa.com","url":"https://alion.io/company/lrqa-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Birmingham, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":53000,"max_usd":121000,"period":"year","method":"role_country_seniority_unknown","sample_n":140},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false},{"name":"Crowdstrike","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-10-01T00:00:00Z","employer_posted_date":"2026-10-01","last_verified_at":"2026-10-15T23:03:04Z","board_verified":true,"closed_at":null,"days_open":15,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":15},"description":"Role Purpose\nWorking as a key member of our SOC 24x7 shift team, you will use your expertise to detect and respond to a multitude of threats of differing capability and sophistication. You will use SIEM, EDR, Network Monitoring, bespoke tooling and Threat Intelligence solutions to triage suspicious events, provide context and an assessment of risk/threat to customers to enable efficient response and continuously monitor customer environments; yet it doesn’t stop there.\nNot only will you be expected to assess threats using all information sources available to you, but you’ll also get involved in projects that enhance the capability of our services and ensure we are providing cutting-edge detection & response services to our clients. This includes threat hunting, supporting the implementation of new cutting-edge technology, malware analysis, recommending detections and getting involved in strategic cross-team projects as part of your wider role within our award-winning Security Operations Centre.\nWe’re a high-trust, close-knit team that doesn’t operate under the traditional SOC tiers, so the passion and drive to get involved, make a difference and use your eye for detail to spot patterns and support both our security mission and that of our customers is essential.\nKey Role Responsibilities\nThe following list is indicative of the overall expectations of the role (not exhaustive):\nOperate as part of the 24x7 SOC Monitor Team, providing proactive defensive monitoring to clients of all shapes, sizes and industries.\n\nGenerate detailed, informative, and actionable incident reports from your investigations with applicable recommendations, mitigations, and remediations.\n\nRespond to, and action all alerts and customer requests within agreed SLAs.\n\nMaintain an awareness of the latest Defensive Monitoring technologies and trends.\n\nMaintain an up-to-date understanding of current threats and trends in cyber crime.\n\nProduce high quality management and operational reports within agreed SLAs.\n\nConstantly strive to tune and improve alerts, playbooks, and automations.\n\nMaintain regular written and verbal communication with customers, suppliers, and internally as required.\n\nTechnical/Professional/Qualifications/Requirements\nThe following list of requirements are pre-requisites for the role:\nExperience with Microsoft Sentinel and Microsoft Defender (Defender for Endpoint, Defender for Identity, Defender for Cloud Apps), including deployment, configuration, and day-to-day operational management within an enterprise environment.\n\nKnowledge of SIEM and EDR/EPP technologies, with a particular focus on leveraging Microsoft Sentinel and Defender to deliver threat detection, investigation, and response capabilities.\n\nProven ability to operate within a complex, high-performing service management enterprise environment, using Microsoft’s security tools to enhance visibility, resilience, and incident response effectiveness.\n\nExperience in conducting security investigations using large datasets, with knowledge of Kusto Query Language (KQL) to develop custom Sentinel queries and analytics rules.\n\nSolid understanding of enterprise IT infrastructure, including Windows and Linux operating systems, networking, and third-party security tools - and how these integrate with the Microsoft security ecosystem.\n\nExperience of analysing complex security data within Sentinel and Defender portals, identifying patterns, prioritising threats, and presenting actionable recommendations.\n\nAn understanding of attack vectors, MITRE ATT&CK framework, and adversary behaviours, with the ability to distinguish between normal and abnormal activity.\n\nExcellent communication skills, with experience in customer-facing roles and the ability to clearly convey technical findings and security risk to both technical and non-technical stakeholders, using Microsoft dashboards and reporting tools.\n\nDesirable\nMicrosoft certifications such as SC-200 and SC-100\n\nCrowdstrike certifications such as CCFA, CCSA\n\nPython, PowerShell, and RegEx skills\n\nKey Performance Indicators\nKey Performance Indicators (KPIs) are goals that must be achieved in order to demonstrate satisfactory or above performance for this job role. KPIs will be monitored on an on-going basis throughout each year and will be explored in further depth as part of the performance management process.\nTriage and action all security alerts and customer requests within established SLAs\n\nMaintain documentation of processes, investigations, and use-cases\n\nComplete all management reporting, projects, and any other assigned work\n\nDevelop the Security Engineering technology stack through upgrades and automation.\n\nMentor junior members of staff and develop their technical understanding.\n\nAdhere to Analyst Best Practice, Core Competencies, Compliance and Process/Procedure Standards\n\nAdhere to LRQA Policies and Procedures, as detailed in the HR ‘UK Employee Handbook’ and ‘Policies & Procedures’ sections of the LRQA Intranet\n\nBy joining us, you’ll help make the world a better place.\nWho are LRQA?\nLRQA is a leading global assurance partner, combining deep industry expertise with innovative solutions to help organizations manage risk, improve performance, and drive sustainable growth.\nOperating in over 50 countries with a team of 2,500+ professionals, we support more than 60,000 clients worldwide through assurance, certification, cybersecurity, inspection, and training services. Our purpose is simple: to help businesses build a safer, more secure, and more sustainable future.\nWhat We Offer:\nJoin a global team where your expertise is valued and your development is supported. We offer a collaborative work environment, opportunities for professional growth, flexible working arrangements where applicable, a competitive salary aligned with the market, and a comprehensive benefits package.\nPre-Employment Checks\nIf you are successful in securing a role with us, we may carry out pre-employment checks, as permitted by local law, including verification of identity, right to work, employment history, education, and criminal records where applicable.\nThese checks are conducted by our trusted screening partner, Cfirst, in compliance with applicable data protection laws. Any personal data collected will be used solely for recruitment purposes, stored securely, and retained only as required.\nFor questions about the screening process, contact  , For queries regarding your personal data, contact ","description_format":"text","description_chars":6516,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-15T07:24:38Z"}],"visa":[],"liveness":{"score":49,"band":"ok","label":"Likely open","p_open":1,"p_active":0.656,"p_room":0.75,"age_days":15,"expected_fill_days":20,"reasons":["conf:6","win:late","comp:brand"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/lrqa-24-x-7-security-analyst","json_url":"https://alion.io/job/lrqa-24-x-7-security-analyst.json","meta":{"generated_at":"2026-10-16T07:28:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5285,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1756963},"rest":"https://alion.io/mcp/rest/get_company?id=1756963"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flrqa-24-x-7-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flrqa-24-x-7-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flrqa-24-x-7-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/lrqa-24-x-7-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flrqa-24-x-7-security-analyst"}]}