Cyber Security Analyst

We are looking for a proactive and technically capable Cyber Security Analyst to join our Security Operations team. In this role, you will be responsible for detecting, investigating, and responding to security incidents across a diverse technology estate spanning both cloud and on-premise environments. Reporting to the Security Operations Lead, you will play a key role in strengthening our detection and response capabilities. This includes developing high-quality detections, improving playbooks, and conducting post-incident reviews to drive continuous improvement. You will work closely with technical and non-technical stakeholders across the business, requiring strong communication skills and the ability to translate complex security concepts into clear, actionable insights. This role includes participation in an on-call rota for high-severity incident response. This is a great opportunity to play a key role in evolving and maturing our Security Operations capability. You'll get exposure to a modern technology stack across cloud and on-premise environments . You'll join a collaborative environment with opportunities to influence tooling, detections, and processes as well as ongoing learning and development in a fast-moving security landscape What will you do as aCyber Security Analystat N Brown?

• Proactively monitor and analyse security events to detect and respond to potential threats
• Investigate alerts and incidents, performing triage, containment, and remediation activities
• Develop, implement, and tune detection use cases aligned to frameworks such as MITRE ATT&CK
• Correlate data from multiple sources (endpoint, identity, network, and cloud) to identify suspicious behaviour
• Build and maintain dashboards, alerts, and reports to improve security visibility
• Conduct proactive threat hunting based on threat intelligence and behavioural patterns
• Develop and maintain incident response playbooks, continuously improving them based on emerging threats and lessons learned
• Perform post-incident reviews to identify root causes and implement preventative measures
• Tune alerts and detections to reduce false positives and improve signal-to-noise ratio
• Contribute to the ongoing improvement and management of security tooling and processes
  
  Proven experience monitoring, investigating and responding to security incidents across enterprise environments
• Hands-on experience with SIEM platforms such as Splunk, including detection engineering, alert tuning, and dashboard creation
• Experience with endpoint detection and response tools such as Microsoft Defender for Endpoint or similar
• Strong understanding of common attack techniques, tactics, and procedures (TTPs), ideally mapped to MITRE ATT&CK
• Experience analysing logs across multiple domains (endpoint, identity, network, cloud)
• Familiarity with SOAR platforms and automation
• Experience working within security frameworks such as PCI DSS, ISO 27001, or similar
• Strong analytical and problem-solving skills with the ability to work independently
• Excellent communication skills, with the ability to clearly articulate security risks to non-technical audiences
Desirable Experience
• Experience in threat hunting and behavioural-based detection
• Experience reducing false positives and improving detection quality in a SOC environment
• Scripting or automation experience
• Understanding of web application security and common attack vectors
  
  N Brown is a leading UK digital retail platform for clothing, footwear, home and technology, headquartered in Manchester and employing over 1,000 people nationwide. Through our strategic retail brands JD Williams, Jacamo and Simply Be and our unique payments offering, we exist to champion inclusivity and serve the underserved. Our customers are our passion, and we take great pride in delivering products that ensure they can look and feel amazing, without compromising on choice, value and accessibility.
We're committed to building a diverse workforce and creating an inclusive environment that values equality for all. Our vision is that by 'By championing inclusion, N Brown will become the UK's most loved and trusted consumer platform, shaping the future of financial empowerment and personal expression'. 'Diversity, Equity, Inclusion and Belonging are, therefore, at the heart of our culture. In May 2024 we were delighted to be named one of The Sunday Times Best Places to Work 2024. We work hard to create a happy and inclusive culture for everyone and we're so proud to have made this list - as voted for by our very own colleagues! Ways of Working We offer hybrid working which varies across the business depending on the role you're in. Our Head Office is located in the Northern Quarter in Manchester City Centre. So if you are travelling by train, tram or bus we're perfectly located, plus we're surrounded by cool cafes, trendy bars and the best places to eat! Our working hours are 36.17 per week over 5 days. We believe AI will become a standard part of modern professional practice. We are therefore looking for individuals who are open to learning, testing, and responsibly adopting AI tools to improve efficiency, insight, and impact in their role.


• Hybrid working (2-3 days in the office at a minimum)
• 24 days holiday (+ 8 bank holidays)
• Annual bonus scheme
• Enhanced maternity and adoption leave
• Company pension with up to 8% N Brown contribution
• Mental Health support both internally and externally, including access to our wellbeing champions and counselling services
• A range of financial wellbeing support
• Stream - a financial wellbeing tool that helps you track your pay, access earnings early and manage your money with confidence
• Colleague discount across all N Brown brands
• Onsite café with subsidised rates and local restaurant discounts!
• Life Assurance and Private Medical Insurance
• Paid volunteer time - all our colleagues can take a full day paid to volunteer for a charity of their choice
N Brown - who we are and why work for us?