We’re looking for a to join a growing Managed Service Provider in Reading, supporting a portfolio of customers across multiple sectors.

You’ll act as an escalation point for Tier 1, owning investigations end-to-end — triaging SIEM and EDR alerts, leading incident response, hunting threats using MITRE ATT&CK, and tuning detections to cut noise. You’ll also mentor junior analysts and help mature playbooks and runbooks.

We’re looking for 3+ years in a SOC or MSSP, hands-on with SIEM, EDR, and Microsoft 365 / Entra ID security. KQL or PowerShell scripting, phishing and malware triage experience, and clear written communication are essential. Security+, SC-200, BTL1 or similar certs beneficial.