Information Security Analyst – Security Operations Centre

Overview

In this role you join PA’s Group Security Operations Centre to monitor, detect and respond to security incidents across a broad technology estate. You will work with cross‑functional teams to improve detections, controls and operating practices, driving proactive threat detection and incident response. The role combines hands‑on investigation with the development of playbooks, dashboards and automation to reduce alert noise and strengthen security posture. You will contribute to incident reviews, risk assessments and guidance for asset owners, with opportunities to engage in on‑call rotations and security improvement initiatives.

Pay / Benefits

• Health and lifestyle perks including private healthcare for you and family
• 25 days annual leave plus Christmas Eve half day, option to buy 5 more
• Generous pension scheme
• Annual performance bonus
• PA share ownership
• Tax efficient benefits (cycle to work, give as you earn)

Responsibilities

• Monitor and investigate security alerts across SIEM, EDR/XDR, email security, cloud platforms, identity, network security and data loss prevention tooling
• Triage security events, determine scope and impact, coordinate containment and remediation, and maintain investigation records
• Perform proactive threat hunting using threat intelligence and attacker techniques
• Develop and tune detections, use cases, dashboards, playbooks and automation to improve coverage and reduce alert volume
• Support digital forensics, malware and phishing analysis, and post‑incident reviews as required
• Analyze threat intelligence, vulnerabilities and advisories to assess exposure and recommend actions
• Support vulnerability management through reporting and engagement with asset owners
• Carry out security checks for business needs and provide risk‑based advice
• Contribute to security improvement projects, documentation, knowledge sharing, metrics and reporting
• Participate in paid out‑of‑hours on‑call rota for high‑severity incidents

Key requirements

• Practical experience in a SOC, incident response, security monitoring, detection engineering or closely related security role
• Strong investigation, log analysis and correlation across endpoint, identity, email, cloud and network telemetry
• Experience using SIEM and EDR/XDR platforms to investigate alerts and support containment and remediation
• Ability to document investigations clearly and explain findings to technical and non‑technical stakeholders
• Good understanding of common attacker techniques, phishing, account compromise, malware, vulnerabilities and cloud security risks
• Ability to prioritise effectively and collaborate across operational teams
• Evidence of careful, curious and evidence‑led approach with attention to detail
• Willingness to participate in the paid on‑call rota

• collaboration across operational teams
• clear communication to technical and non‑technical stakeholders
• attention to detail
• SOC / incident response
• Log analysis and correlation
• SIEM and EDR/XDR platforms

…