IT Security Analyst

About the role

Do you want play a hands on role within a rapidly growing, innovative company - keeping our environment secure, stable, and continuously improving?

We're looking for an IT Security Analyst to join our growing tech function. This is very much a doer role where you'll be in the detail - monitoring alerts, investigating incidents, tuning detections - but also stepping back to help us get better over time. That might be improving how we use Sentinel, tightening up controls in Defender, or getting more value out of Purview.

You'll work closely with our internal teams and our SOC, and you'll have genuine ownership over parts of the security operation. It's not just about reacting to issues - it's about helping us spot them earlier, reduce noise, and build something more proactive.

There's also room to expand your experience - alongside core SecOps work, you'll get involved in how we protect data (Purview, DLP, labelling), and how we support compliance and assurance across the business.

This is the perfect role for someone who wants to:

• Get properly hands on in a working security operations environment
• Build deeper expertise in Microsoft security tooling (Defender, Sentinel, Purview)
• Start broadening into data protection and governance, not just core SecOps
• Have a say in how things are done, not just follow a runbook

We're not trying to build something overly complicated - we just want it to be solid, sensible, and continuously improving. You'll be part of that.

You'll be getting up to a range of tasks and responsibilities, including;

Security Operations & Incident Response

• Monitoring and triaging alerts across Microsoft Defender and Sentinel
• Investigating incidents properly - getting to root cause, not just fixing the symptom
• Working with our SOC to improve detections and cut down false positivesDocumenting what happened and feeding that back into better processes and playbooks

Vulnerability & Threat Management

• Supporting vulnerability scanning and making sure issues are actually getting fixed
• Helping prioritise what matters vs what's just noise
• Using threat intel and trends to strengthen how we detect and respond
• Supporting patch validation and general configuration hygiene across endpoints and cloud

Data Protection & Information Security

• Working with Microsoft Purview, particularly around DLP and data visibility
• Supporting sensitivity labelling (and improving how it's used in practice)
• Helping us identify where sensitive data lives and how it's being used
• Contributing to making data protection part of the day to day-not just a policy document

Risk, Compliance & General Security Hygiene

• Supporting ISO 27001 and Cyber Essentials Plus activities
• Helping with audits, evidence, and keeping documentation current
• Getting involved in control reviews and basic assurance work
• Supporting supplier/security checks where needed

Working With Others

• Partnering with Infrastructure, Service Desk, GRC, and the wider Tech team
• Being someone people can come to with security questions (and getting them sensible answers)
• Supporting user awareness - phishing simulations, guidance, that kind of thing
• Chipping in with ideas on how we improve, not just maintain

About you

At Cooper Parry, we're in it together. All we ask of our people is that they play all in. You'll continuously strive to keep learning - whether you're a trainee or a Partner - and you'll be brave, stepping out of your comfort zone to tackle new challenges. Above all, be nice. A simple notion, but an irreplaceable part of what makes CP, CP.

We're not expecting a finished product here - but we do want someone who's comfortable in a security operations role and keen to take ownership of their space.

You'll already have;

• Experience working with tools like Defender and Sentinel
• Understanding of how to investigate alerts properly rather than just clearing queues
• Knowledge of Microsoft 365 & Azure from a security point of view
• A grasp of how incident response should actually work in practice.

From a technical angle, it would be ideal if you've had some exposure to things like KQL, PowerShell, or similar - nothing too niche, just enough to show you can dig into data and automate where it makes sense. It would also be great if you've touched Purview, DLP, or anything around data protection.

More broadly, we're looking for someone who's naturally curious. Someone who doesn't just accept alerts at face value, but wants to understand what actually happened and why. You should be comfortable working across teams, explaining things in plain English when needed, and managing your own workload without constant direction.

You don't need to tick every box - but you do need to be someone who takes ownership, thinks things through properly, and wants to get better over time.

What's in it for you?

Our people are the beating heart of our culture. We know that if you love working here, and you're given the trust and autonomy to work in a way that best suits you, you'll produce amazing results.

That's why we offer things like:

• A flexible approach to work - balancing working from home, in office or with clients
• A generous holiday entitlement
• An enhanced parental leave policy
• An enhanced pension scheme
• No dress code - just "wear something!"
• A multi award winning wellbeing offering to support your physical, mental, spiritual, and financial health
• Volunteering opportunities to work closer with local communities and charities
• Cooper Parry social/sports clubs

Feeling supported and welcomed is such a big part of bringing your whole self to work. As an equal opportunities employer, we'll work with you to ensure you have everything you need to develop your skills and achieve your best.

Get in touch if you have any questions about our commitment to Diversity & Inclusion or about accessibility/accommodations during your application process.