Tank Recruitment
Bristol, Gloucestershire
2nd Line Engineer Bristol Salary: 32-37k Location: Bristol (Hybrid) Type: Full-time, permanent About the Opportunity We are recruiting on behalf of an established Bristol-based managed service provider with a reputation for strong engineering discipline and high-quality service. They are looking for a 2nd Line Engineer to join their team. If you want a role where you are more than a "ticket-closer", and where you can be a mentor and a key contributor to technical processes, this could be the move for you. The Role As a Tier-2 escalation engineer, you will own the resolution of complex issues that go beyond the initial support desk. You will work within a modern tech stack (Microsoft 365, Azure, Intune and high-level networking) supporting a diverse SME customer base. Key responsibilities include: Technical Escalations: Resolving complex issues across M365 (Exchange, SharePoint, Teams), Intune and Entra ID. Infrastructure & Networking: Troubleshooting firewall rules, VPNs, VLANs and hybrid identity setups. Mentorship: Supporting 1st line and apprentice engineers through pair-troubleshooting and knowledge transfer. Continuous Improvement: Identifying recurring ticket patterns and authoring runbooks to improve team efficiency. About You The company hires based on the GWC principle: you G et the role, you W ant it, and you have the C apacity to deliver. Experience: 2+ years in an MSP 2nd line role or a senior in-house IT support position. M365 Knowledge: Proficient in admin tasks. Certifications such as MS-900 are expected, while MS-102 or endpoint admin certifications are highly preferred. Networking: Solid understanding of DNS, DHCP and firewalls. Experience with Aruba, Ubiquiti or DrayTek is a plus. Tooling: Familiarity with PSA/RMM tools such as HaloPSA and Datto, or equivalents like ConnectWise or NinjaOne. Communication: Calm, clear and professional written communication skills. How to Apply Send your CV to through and we will be in touch to discuss the role in more detail. All applications are treated in confidence.
2nd Line Engineer Bristol Salary: 32-37k Location: Bristol (Hybrid) Type: Full-time, permanent About the Opportunity We are recruiting on behalf of an established Bristol-based managed service provider with a reputation for strong engineering discipline and high-quality service. They are looking for a 2nd Line Engineer to join their team. If you want a role where you are more than a "ticket-closer", and where you can be a mentor and a key contributor to technical processes, this could be the move for you. The Role As a Tier-2 escalation engineer, you will own the resolution of complex issues that go beyond the initial support desk. You will work within a modern tech stack (Microsoft 365, Azure, Intune and high-level networking) supporting a diverse SME customer base. Key responsibilities include: Technical Escalations: Resolving complex issues across M365 (Exchange, SharePoint, Teams), Intune and Entra ID. Infrastructure & Networking: Troubleshooting firewall rules, VPNs, VLANs and hybrid identity setups. Mentorship: Supporting 1st line and apprentice engineers through pair-troubleshooting and knowledge transfer. Continuous Improvement: Identifying recurring ticket patterns and authoring runbooks to improve team efficiency. About You The company hires based on the GWC principle: you G et the role, you W ant it, and you have the C apacity to deliver. Experience: 2+ years in an MSP 2nd line role or a senior in-house IT support position. M365 Knowledge: Proficient in admin tasks. Certifications such as MS-900 are expected, while MS-102 or endpoint admin certifications are highly preferred. Networking: Solid understanding of DNS, DHCP and firewalls. Experience with Aruba, Ubiquiti or DrayTek is a plus. Tooling: Familiarity with PSA/RMM tools such as HaloPSA and Datto, or equivalents like ConnectWise or NinjaOne. Communication: Calm, clear and professional written communication skills. How to Apply Send your CV to through and we will be in touch to discuss the role in more detail. All applications are treated in confidence.
Tank Recruitment
Incident Response Analyst We are seeking an experienced Incident Response Analyst to support the detection, triage, investigation, containment and resolution of cyber security incidents across a complex enterprise environment. Key Responsibilities Monitor and investigate alerts from SIEM, EDR/XDR, identity, email, cloud and network security technologies. Triage incidents, assess severity and business impact, and coordinate containment, eradication and recovery. Investigate phishing, malware, account compromise, data loss, unauthorised access and suspicious network activity. Collect, preserve and analyse endpoint, server, identity, network, email and cloud artefacts. Analyse logs, packet captures, forensic images and security telemetry to establish scope, root cause and attacker activity. Identify IOCs, attacker behaviours, TTPs and map findings to MITRE ATT&CK where appropriate. Develop and execute threat hunts and contribute to detection rule, monitoring and logging improvements. Maintain incident records, investigation timelines, evidence and post-incident reports. Develop and maintain incident response playbooks, procedures and communication processes. Conduct post-incident reviews, root-cause analysis and lessons-learned activities. Provide clear technical and management updates to senior stakeholders. Essential Skills & Experience Practical experience in cyber security incident response, security monitoring or a SOC environment. Hands-on experience with SIEM and EDR/XDR technologies. Experience investigating Windows and Linux systems, authentication activity, security logs and network traffic. Strong understanding of the incident response lifecycle. Knowledge of MITRE ATT&CK, Cyber Kill Chain and NIST. Good understanding of enterprise networking, IAM, cloud, email and endpoint security. Experience with digital forensics and evidence handling. Strong communication, investigation and analytical skills. Desirable Banking, financial services or other regulated-sector experience. Microsoft Sentinel, Defender XDR, Defender for Identity or Defender for Cloud. KQL, PowerShell, Python or similar scripting/automation. Threat hunting, malware analysis and detection engineering. Azure and Microsoft 365 investigation experience. EnCase, FTK, Velociraptor, Volatility or Wireshark. Certifications such as GCIH, GCIA, GCFA, GNFA, SC-200, CySA+ or CISSP. Qualifications Relevant cyber security experience, degree or equivalent practical experience. Knowledge of NIST, CIS Controls and recognised information security standards.
Incident Response Analyst We are seeking an experienced Incident Response Analyst to support the detection, triage, investigation, containment and resolution of cyber security incidents across a complex enterprise environment. Key Responsibilities Monitor and investigate alerts from SIEM, EDR/XDR, identity, email, cloud and network security technologies. Triage incidents, assess severity and business impact, and coordinate containment, eradication and recovery. Investigate phishing, malware, account compromise, data loss, unauthorised access and suspicious network activity. Collect, preserve and analyse endpoint, server, identity, network, email and cloud artefacts. Analyse logs, packet captures, forensic images and security telemetry to establish scope, root cause and attacker activity. Identify IOCs, attacker behaviours, TTPs and map findings to MITRE ATT&CK where appropriate. Develop and execute threat hunts and contribute to detection rule, monitoring and logging improvements. Maintain incident records, investigation timelines, evidence and post-incident reports. Develop and maintain incident response playbooks, procedures and communication processes. Conduct post-incident reviews, root-cause analysis and lessons-learned activities. Provide clear technical and management updates to senior stakeholders. Essential Skills & Experience Practical experience in cyber security incident response, security monitoring or a SOC environment. Hands-on experience with SIEM and EDR/XDR technologies. Experience investigating Windows and Linux systems, authentication activity, security logs and network traffic. Strong understanding of the incident response lifecycle. Knowledge of MITRE ATT&CK, Cyber Kill Chain and NIST. Good understanding of enterprise networking, IAM, cloud, email and endpoint security. Experience with digital forensics and evidence handling. Strong communication, investigation and analytical skills. Desirable Banking, financial services or other regulated-sector experience. Microsoft Sentinel, Defender XDR, Defender for Identity or Defender for Cloud. KQL, PowerShell, Python or similar scripting/automation. Threat hunting, malware analysis and detection engineering. Azure and Microsoft 365 investigation experience. EnCase, FTK, Velociraptor, Volatility or Wireshark. Certifications such as GCIH, GCIA, GCFA, GNFA, SC-200, CySA+ or CISSP. Qualifications Relevant cyber security experience, degree or equivalent practical experience. Knowledge of NIST, CIS Controls and recognised information security standards.
Tank Recruitment
Security Architect: Defence Sector South / South West England - Remote, with travel to customer sites as required Salary range 80,000 - 90,000 Live SC clearance required (minimum) The company A bespoke technology consultancy working exclusively with customers in the defence space. As a specialist SME, they offer something larger consultancies can't: direct access to senior leadership, real influence over how the business grows, and work that is varied, meaningful and technically demanding. The role They are looking for a Security Architect to join the team and support defence customers in designing and delivering secure, resilient solutions. You will act as a trusted technical adviser, working with customers to shape security architecture across complex environments, and you will have a genuine voice in how the consultancy develops its security offering. Key responsibilities Design and review security architectures across cyber, cloud and enterprise environments Provide expert security advice to defence customers, translating technical risk into clear, practical recommendations Develop secure cloud architectures in AWS or Azure Work with customer and delivery teams to ensure security is built in from the start Produce high-quality architecture documentation, designs and assurance artefacts Travel to customer sites as needed to engage stakeholders and support delivery About you Essential Live SC clearance (minimum) . Candidates with DV are also welcome Current (live) CISSP certification Strong experience in cyber security architecture, cloud security architecture (AWS or Azure), or enterprise security architecture Confident working directly with customers and communicating at both technical and senior levels Based in the south or south west of England and happy to travel to customer sites Desirable TOGAF certification Background working in the defence sector Why join? Specialist, mission-led work supporting defence customers Small-business culture with visibility and influence A role where your expertise is valued and your input shapes the outcome Benefits, e.g. flexible working, training budget, certification support How to apply Send your CV through, or get in touch for a confidential conversation.
Security Architect: Defence Sector South / South West England - Remote, with travel to customer sites as required Salary range 80,000 - 90,000 Live SC clearance required (minimum) The company A bespoke technology consultancy working exclusively with customers in the defence space. As a specialist SME, they offer something larger consultancies can't: direct access to senior leadership, real influence over how the business grows, and work that is varied, meaningful and technically demanding. The role They are looking for a Security Architect to join the team and support defence customers in designing and delivering secure, resilient solutions. You will act as a trusted technical adviser, working with customers to shape security architecture across complex environments, and you will have a genuine voice in how the consultancy develops its security offering. Key responsibilities Design and review security architectures across cyber, cloud and enterprise environments Provide expert security advice to defence customers, translating technical risk into clear, practical recommendations Develop secure cloud architectures in AWS or Azure Work with customer and delivery teams to ensure security is built in from the start Produce high-quality architecture documentation, designs and assurance artefacts Travel to customer sites as needed to engage stakeholders and support delivery About you Essential Live SC clearance (minimum) . Candidates with DV are also welcome Current (live) CISSP certification Strong experience in cyber security architecture, cloud security architecture (AWS or Azure), or enterprise security architecture Confident working directly with customers and communicating at both technical and senior levels Based in the south or south west of England and happy to travel to customer sites Desirable TOGAF certification Background working in the defence sector Why join? Specialist, mission-led work supporting defence customers Small-business culture with visibility and influence A role where your expertise is valued and your input shapes the outcome Benefits, e.g. flexible working, training budget, certification support How to apply Send your CV through, or get in touch for a confidential conversation.
