Do you want play a hands-on role within a rapidly growing, innovative company - keeping our environment secure, stable, and continuously improving?

We’re looking for an IT Security Analyst to join our growing tech function. This is very much a doer role where you’ll be in the detail - monitoring alerts, investigating incidents, tuning detections - but also stepping back to help us get better over time. That might be improving how we use Sentinel, tightening up controls in Defender, or getting more value out of Purview.

You’ll work closely with our internal teams and our SOC, and you’ll have genuine ownership over parts of the security operation. It’s not just about reacting to issues - it’s about helping us spot them earlier, reduce noise, and build something more proactive.

There’s also room to expand your experience - alongside core SecOps work, you’ll get involved in how we protect data (Purview, DLP, labelling), and how we support compliance and assurance across the business.

This is the perfect role for someone who wants to:

• Get properly hands-on in a working security operations environment
• Build deeper expertise in Microsoft security tooling (Defender, Sentinel, Purview)
• Start broadening into data protection and governance, not just core SecOps
• Have a say in how things are done, not just follow a runbook

We’re not trying to build something overly complicated - we just want it to be solid, sensible, and continuously improving. You’ll be part of that.

You’ll be getting up to a range of tasks and responsibilities, including;

Security Operations & Incident Response

• Monitoring and triaging alerts across Microsoft Defender and Sentinel
• Investigating incidents properly - getting to root cause, not just fixing the symptom
• Working with our SOC to improve detections and cut down false positives
• Documenting what happened and feeding that back into better processes and playbooks

Vulnerability & Threat Management

• Supporting vulnerability scanning and making sure issues are actually getting fixed
• Helping prioritise what matters vs what’s just noise
• Using threat intel and trends to strengthen how we detect and respond
• Supporting patch validation and general configuration hygiene across endpoints and cloud

Data Protection & Information Security

• Working with Microsoft Purview, particularly around DLP and data visibility
• Supporting sensitivity labelling (and improving how it’s used in practice)
• Helping us identify where sensitive data lives and how it’s being used
• Contributing to making data protection part of the day-to-day—not just a policy document

Risk, Compliance & General Security Hygiene

• Supporting ISO 27001 and Cyber Essentials Plus activities
• Helping with audits, evidence, and keeping documentation current
• Getting involved in control reviews and basic assurance work
• Supporting supplier/security checks where needed

Working With Others

• Partnering with Infrastructure, Service Desk, GRC, and the wider Tech team
• Being someone people can come to with security questions (and getting them sensible answers)
• Supporting user awareness - phishing simulations, guidance, that kind of thing
• Chipping in with ideas on how we improve, not just maintain

At Cooper Parry, we’re in it together. All we ask of our people is that they play all in. You’ll continuously strive to keep learning – whether you’re a trainee or a Partner – and you’ll be brave, stepping out of your comfort zone to tackle new challenges. Above all, be nice. A simple notion, but an irreplaceable part of what makes CP, CP.

We’re not expecting a finished product here - but we do want someone who’s comfortable in a security operations role and keen to take ownership of their space.

You’ll already have;

• Experience working with tools like Defender and Sentinel
• Understanding of how to investigate alerts properly rather than just clearing queues
• Knowledge of Microsoft 365 & Azure from a security point of view
• A grasp of how incident response should actually work in practice.

From a technical angle, it would be ideal if you’ve had some exposure to things like KQL, PowerShell, or similar - nothing too niche, just enough to show you can dig into data and automate where it makes sense. It would also be great if you’ve touched Purview, DLP, or anything around data protection.

More broadly, we’re looking for someone who’s naturally curious. Someone who doesn’t just accept alerts at face value, but wants to understand what actually happened and why. You should be comfortable working across teams, explaining things in plain English when needed, and managing your own workload without constant direction.

You don’t need to tick every box - but you do need to be someone who takes ownership, thinks things through properly, and wants to get better over time.

• 
  Best Companies’ No.1 Accountancy Firm & No.30 Best Large Company to Work For in the UK
• Became B Corp Certified in 2023 and we’re still the UK’s largest accountancy B Corp, measuring and improving our impact beyond business for a brighter tomorrow
• Achieved 5 awards at the Inspiring Workplace Awards in 2025: winner in the Large Business category and best in class for inspiring People & Culture, Wellbeing, Inclusion and Employee Experience

• A flexible approach to work - balancing working from home, in office or with clients
• A generous holiday entitlement
• An enhanced parental leave policy
• An enhanced pension scheme
• No dress code – just “wear something!”
• A multi-award-winning wellbeing offering to support your physical, mental, spiritual, and financial health
• Volunteering opportunities to work closer with local communities and charities
• Cooper Parry social/sports clubs