EDR Operations Analyst

Role: EDR Operations Analyst

Location: Cheltenham (hybrid role 2 days on site)

Career Level: Analyst/ Senior Analyst

Please Note: Any offer of employment is subject to satisfactory BPSS and the candidate being granted a level of security clearance which typically requires 5 years continuous UK address history, usually including no periods of 30 consecutive days or more spent outside of the UK. Note: The above information relates to a specific client requirement

Role Purpose

The EDR Operations Analyst provides first-line support across endpoint security operations and IT Service Desk activities. The role is responsible for triaging low-priority Microsoft Defender alerts, performing routine EDR platform administration, managing service tickets, and escalating security incidents where appropriate.

Key Responsibilities

• Perform Level 1 triage of Microsoft Defender for Endpoint alerts.
• Investigate and close low-risk alerts in line with documented procedures.
• Escalate suspicious or complex incidents to senior analysts or the client.
• Carry out routine EDR administration, including device management and user access requests.
• Manage and resolve IT Service Desk tickets within agreed SLAs.
• Provide first-line support to end users and maintain accurate ticket records.
• Follow established operational and security procedures.