Security Analyst

The opportunity

We're looking for a hands-on Cyber Security Engineer to take ownership of security operations and engineering across Kubrick. This is a genuine end-to-end role in a lean team, where you'll be responsible for identifying and responding to threats, implementing security controls, managing vulnerabilities and continually strengthening our security posture.

You'll combine day-to-day security operations with hands-on technical implementation across the Microsoft security ecosystem. From investigating incidents and driving remediation through to improving security controls, maintaining compliance and supporting client assurance, you'll have the autonomy to make a tangible impact across the business.

This role is ideal for someone who enjoys variety, takes ownership and is comfortable working across the full security lifecycle, rather than operating within a single specialism or relying on separate teams to deliver different parts of the function.

About Kubrick

We're an award-winning consultancy that helps organizations design, build and scale data and AI solutions that deliver lasting impact. We work with organizations across industries including financial services, healthcare, retail, energy, aviation and public sector. We're a partner with leading technology providers such as Microsoft, Snowflake, Databricks and Collibra. Our status as a Gold Databricks Partner and an Elite Snowflake AI Data Cloud Services Partner means our people work at the cutting edge of these platforms, opening doors to specialist projects, accreditations, and career opportunities you won't find everywhere. We're also just as committed to building an inclusive industry. We're proud long-standing partners of Women in Data, a not for profit dedicated to helping more women succeed in data and AI, and have achieved numerous awards and shortlists from companies including Women in Data, SheCanCode, Women in Tech, and others.

What you'll be doing

Security operations and incident response

• Own day-to-day security operations, monitoring, triaging and investigating alerts using Microsoft Sentinel, Microsoft Defender and other EDR technologies.

• Lead incident response from initial investigation through containment, eradication, recovery and root cause analysis.

• Work closely with our SIEM partner to investigate threats, coordinate responses and continually improve detection and response capabilities.

• Develop and maintain security runbooks, response playbooks and operational documentation.

Microsoft security engineering and implementation

• Implement, configure and optimise security controls across Microsoft 365, Azure and the wider Microsoft security ecosystem.

• Manage Microsoft Defender policies and configurations across endpoints, identity and cloud environments.

• Implement and maintain Microsoft Purview capabilities, including data classification, sensitivity labels, information protection and Data Loss Prevention (DLP).

• Manage Microsoft Intune, device compliance, Mobile Application Management (MAM), Windows Autopilot and secure Bring Your Own Device (BYOD) policies.

• Strengthen identity governance, cloud security controls and Conditional Access and Cloud Access Security Broker (CASB) policies, as appropriate to the environment.

• Use PowerShell and automation to streamline security operations, reporting and configuration management.

Vulnerability management and resilience

• Own the vulnerability management lifecycle, from scanning and risk assessment through prioritisation, remediation tracking and verification.

• Work with internal stakeholders to address vulnerabilities and reduce organisational risk.

• Support Business Continuity and Disaster Recovery planning, testing and exercises, ensuring lessons learned translate into practical improvements.

Governance, compliance and client assurance

• Maintain and improve our Information Security Management System (ISMS), supporting alignment with ISO 27001, NIST and Cyber Essentials Plus.

• Coordinate evidence gathering and support internal and external audits, risk assessments and security reviews.

• Partner with teams across the business to respond to client security questionnaires, RFPs, tenders and due diligence requests.

• Provide occasional internal IT support where required, contributing to a secure and reliable working environment.

What we're looking for

• Solid foundation within cybersecurity or IT role with hands-on security project or implementation experience

• CISM, CISSP

• Microsoft security stack: Defender, Purview, Intune, Entra ID, Sentinel, and M365 services

• Hands-on experience with AI/ML security challenges, including attack vectors like prompt injection, model poisoning, and data exfiltration via LLMs, as well as applying security controls to AI-integrated environment

• Vulnerability management experience including remediation tracking

• Strong understanding of DLP, data classification, and information protection

• Experience with BYOD management and mobile device/application security

• Cloud security knowledge across Azure and M365

• Familiarity with frameworks: ISO 27001, NIST, Cyber Essentials

• PowerShell scripting for automation and security tasks

• Strong written communication skills for both technical and non-technical audiences

Desirable Skills

• BCP/DR planning and testing experience

• Hands-on or managed penetration testing experience

• Familiarity with PAM, SSO, or CASB solutions

• Python or additional scripting experience

• Relevant certifications: SC-200, AZ-500, CompTIA Security+

Benefits

• Enhanced paid maternity, paternity and adoption leave, above the statutory minimum, with shared parental leave options

• Additional family leave support, including up to 18 weeks parental leave, 5 days dependent care leave, paid fertility treatment leave, and up to 3 weeks paid parental bereavement leave

• 33 days annual leave (25 days annual leave plus 8 public holidays)

• Flexible working options, including flexible start and finish times and part-time arrangements, available upon request

• Hybrid working - choose to work from home, the Kubrick office, or your clients' office (if applicable)

• Pension matching up to 5%

• Unlimited mental health support through Help@Hand, available 24/7 for you and eligible family members

• Financial wellbeing support

• Cycle to Work scheme, save up to 43% on a new bike through Evans Cycles

• Specsavers eye care vouchers

• Internal mobility and career development opportunities

• Recognition and reward programs

• Learning and development opportunities, including professional certifications

• Employee Assistance Program (EAP)

• Mental health, diversity and inclusion support

Diversity & Inclusion

We encourage applications from women and people from all underrepresented backgrounds in data and AI, including racial and ethnic minorities, LGBTQ+ people, people with disabilities, and people who are neurodivergent.

If you need any adjustments during the recruitment process, at any stage, for any reason, just let us know. We're here to support you.