About this role
Salary: £30,000 - 70,000 per year
Requirements: Strong analytical and problem-solving skills, with excellent attention to detail, accuracy and organisation, and the ability to investigate security alerts and events, identify potential risks and make appropriate decisions about escalation.A good understanding of cyber security principles, controls and frameworks, with knowledge of vulnerability management, remediation and security best practice.Knowledge of Microsoft 365 and Azure security capabilities and products, with familiarity with security monitoring, SIEM and endpoint protection technologies.An understanding of identity and access management concepts, including access controls, privileged access and authentication technologies.A sound understanding of networking, operating systems and cloud platforms, with the ability to apply this knowledge when investigating security issues.Effective verbal and written communication skills, with the ability to explain security matters clearly to both technical and non-technical audiences, alongside a customer and service-focused approach and the ability to prioritise effectively in a fast-changing environment.A proactive approach to learning, with a willingness to stay up to date with emerging threats, attack techniques and security technologies and continually develop your cyber security knowledge.The ability to work collaboratively with technology teams, colleagues across the firm, suppliers and security partners to resolve issues, manage risk and support continuous improvement.Someone who brings curiosity, accountability, attention to detail and a genuine desire to help make the firm more secure. Responsibilities: Monitor security alerts and events, carry out initial investigation and triage, escalate incidents where required, and support incident response activities including evidence gathering and post-incident reviews.Conduct vulnerability assessments, support remediation activities and monitor progress, help maintain secure configurations across endpoints, servers, cloud services and networks, and check that security controls are operating effectively.Support the day-to-day operation and administration of security technologies including Microsoft Sentinel, Microsoft 365 security capabilities, endpoint protection, email security, multi-factor authentication, conditional access and identity protection.Support access reviews, privileged access monitoring and other activities that help ensure appropriate and secure access to the firms systems and information.Analyse security data, produce reports and dashboards, identify trends and help strengthen security controls, monitoring capability and operational processes.Maintain accurate procedures, knowledge articles and security records, while supporting audits, compliance reviews, evidence gathering and policy and standards reviews.Support cyber security awareness campaigns and provide colleagues with practical guidance on security best practice and the safe use of technology.Work closely with infrastructure, service delivery, data and business teams, as well as suppliers and security partners, to resolve security issues and strengthen our overall cyber resilience. Technologies: AzureCloudSupportMicrosoft 365SecurityOffice 365 More:
At Thorntons Law, we are a different kind of law firm where relationships with clients and colleagues really last. We protect our people, clients, information and technology by working across security monitoring, vulnerability management, security technology and incident response to help keep the firm safe from cyber threats and information security risks. This hybrid role is based in Dundee or Edinburgh, and we offer a wide range of benefits including 39 days annual leave, contributory pension scheme with salary exchange, private medical insurance, critical illness cover, income protection cover, group life assurance, exceptional family leave packages, assisted conception and IVF leave, health care cash plan, 24-hour wellbeing support, free legal fees for moving home and life planning, cycle to work scheme, gym discounts, retail discounts and hybrid working. We also support professional development through training, courses, specialist accreditations and business skills development, and we are committed to an inclusive workplace where everyone can thrive.
last updated 38 week of 2026