The ad says“Certifications such as SC-200, SC-300, CISSP, GCIH, GCIA, or equivalent”
The ad says“Certifications such as SC-200, SC-300, CISSP, GCIH, GCIA, or equivalent”
The ad says“Certifications such as SC-200, SC-300, CISSP, GCIH, GCIA, or equivalent”
The ad says“Certifications such as SC-200, SC-300, CISSP, GCIH, GCIA, or equivalent”
The ad says“Certifications such as SC-200, SC-300, CISSP, GCIH, GCIA, or equivalent”
The ad says“Deep technical knowledge of Microsoft security technologies including Sentinel, Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft 365 Security, and Entra ID”
The ad says“Deep technical knowledge of Microsoft security technologies including Sentinel, Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft 365 Security, and Entra ID”
The ad says“Deep technical knowledge of Microsoft security technologies including Sentinel, Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft 365 Security, and Entra ID”
The ad says“Deep technical knowledge of Microsoft security technologies including Sentinel, Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft 365 Security, and Entra ID”
The ad says“Strong hands-on experience investigating and responding to complex cyber security incidents”
The ad says“Deep technical knowledge of Microsoft security technologies including Sentinel, Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft 365 Security, and Entra ID”
The ad says“Deep technical knowledge of Microsoft security technologies including Sentinel, Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft 365 Security, and Entra ID”
The ad says“Deep technical knowledge of Microsoft security technologies including Sentinel, Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft 365 Security, and Entra ID”
The ad says“Knowledge of MITRE ATT&CK, NIST Cyber Security Framework, and Zero Trust principles”
The ad says“Knowledge of MITRE ATT&CK, NIST Cyber Security Framework, and Zero Trust principles”
The ad says“Experience with PowerShell, Python, or security automation technologies”
The ad says“Experience with PowerShell, Python, or security automation technologies”
The ad says“Strong understanding of threat hunting, attack techniques, threat intelligence, and vulnerability management”
The ad says“Strong understanding of threat hunting, attack techniques, threat intelligence, and vulnerability management”
The ad says“Strong understanding of threat hunting, attack techniques, threat intelligence, and vulnerability management”
The ad says“Knowledge of MITRE ATT&CK, NIST Cyber Security Framework, and Zero Trust principles”
The Senior Cyber Analyst is the senior technical lead within the Cyber Services function, responsible for complex cyber investigations, incident response, threat detection, and security platform optimisation
Acting as the highest technical escalation point within cyber operations, the role provides leadership, mentoring, and strategic direction to ensure customers maintain a strong and resilient security posture
Incident Response & Threat Management
Lead the investigation and resolution of complex cyber security incidents across endpoint, network, cloud, and identity platforms
Act as the senior escalation point for threat hunting, incident response, and security investigations
Conduct forensic analysis, identify attack patterns, and provide recommendations to reduce risk and improve resilience
Security Platforms & Service Improvement
Own the technical effectiveness and continual improvement of Microsoft Sentinel, Microsoft Defender, SIEM, SOAR, EDR, and XDR capabilities
Develop and maintain detection rules, use cases, automation, and response playbooks to improve operational efficiency
Work with the Technical Architect to align security tooling, controls, and services with customer and organisational requirements
Technical Leadership & Governance
Provide technical leadership, mentoring, and quality assurance across the Cyber Services team
Support security governance and compliance activities including ISO27001, Cyber Essentials Plus, and customer assurance requirements
Produce technical reports, post-incident reviews, threat intelligence briefings, and stakeholder communications
Collaborate with Service Delivery, Support, Projects, and Product teams to identify and address security risks and service improvements
Benefits
Autonomy to develop and grow your skills and experience
Be part of exciting project work that is making a difference in society
Strong, inspiring and thought-provoking leadership
A supportive and collaborative environment
Development access to LinkedIn Learning, a management development programme and training
Social - Breakfast Tuesdays, Pizza Thursday monthly, weekly social in the office and commitment to charitable causes
Time off 25 days a year
Pension Salary Exchange Scheme with 4% employer contribution and 5% employee contribution
Discretionary Company Bonus based on company and individual performance
Life Assurance of 4 times base salary
Private Medical Insurance which is non-contributory (spouse and dependants included)
Worldwide Travel Insurance which is non-contributory (spouse and dependants included)
Benefits Platform offering various retail and leisure discounts
Preferred experience
Strong, inspiring and thought-provoking leadership
Excellent documentation, analytical, and stakeholder management skills
Experience designing, tuning, and optimising SIEM, SOAR, EDR, and XDR solutions
Strong hands-on experience investigating and responding to complex cyber security incidents
Experience mentoring technical teams and driving operational standards
Significant experience in a senior Cyber Security, SOC, Threat Detection, or Incident Response role
Be part of exciting project work that is making a difference in society
Autonomy to develop and grow your skills and experience
Ability to translate technical findings and cyber risk into clear business outcomes and recommendations
Strong understanding of threat hunting, attack techniques, threat intelligence, and vulnerability management
A supportive and collaborative environment
Deep technical knowledge of Microsoft security technologies including Sentinel, Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft 365 Security, and Entra ID
Background in regulated or security-sensitive environments, including public sector, healthcare, local government, or financial services
Certifications such as SC-200, SC-300, CISSP, GCIH, GCIA, or equivalent
Knowledge of MITRE ATT&CK, NIST Cyber Security Framework, and Zero Trust principles
Experience contributing to cyber service development, tooling strategy, or architectural design
Experience with PowerShell, Python, or security automation technologies
