ICT SECURITY ANALYST

We’re recruiting an ICT Security Analyst to join our ICT service at Milton Keynes City Council. The ICT Security team protects the council’s systems, data and digital services so the council can continue to operate securely and reliably for the people of Milton Keynes. 
The team sets and maintains security policies, standards and guidance, manages cyber risk, and works across council services to make sure security is built into day-to-day operations, projects and technology change. The team monitors for threats and weaknesses, investigates incidents, leads response and recovery when issues arise, and helps strengthen resilience through planning, training, awareness and continual improvement. 
It also supports compliance with recognised frameworks, works with partners and suppliers to improve secure delivery, and helps the council adopt modern technologies in a safe, controlled and responsible way. By protecting information and reducing disruption, the Security team helps Milton Keynes City Council remain resilient, trusted and able to deliver essential services across more than 200 council services.  You’ll help us protect vital systems, reduce cyber risk, respond to incidents and give practical advice that supports colleagues right across the organisation
Related professional qualifications and experience, including degree level qualification.
Expertise Knowledge of Microsoft Security Stack: Experience with Microsoft Defender suite, Sentinel, Entra ID, and Copilot for Security. Ability to monitor, analyse, and respond to alerts in Sentinel and Defender; familiarity with automation playbooks.
Demonstrable excellent written and verbal communication skills, with the ability to translate security risks, technical findings and recommended actions for technical and non-technical audiences.
Experience using PowerShell or Kusto Query Language (KQL) to support analysis, monitoring, and automation. Exposure to coding (e.g. Python) combined with a demonstrable ability to work with accuracy and attention to detail
Cyber Security certifications, such as: CCSP, CySA+, GCIA, CSA, SC-200, or similar.
Demonstrable experience of working in an Enterprise information security function within a large organisation. Ability to work closely with ICT Security Lead, Identity & Access Administrator, and other stakeholders including colleagues across MKCC.
Practical experience with asset management systems and experience securing Microsoft 365 services (e.g. SharePoint, Teams, Copilot).
Evidenced knowledge and understanding of security frameworks, standards and best practices (CAF, Cyber Essentials, NIST, ISO27001).
Proven familiarity with modern network, cloud and identity security concepts such as authentication, firewalls, endpoint protection, email security, vulnerability management, logging, monitoring and security controls.
Continuous Learning and Adaptability: Commitment to staying updated on Microsoft security technologies, threat trends, and best practices.