Senior Cyber Analyst

• The Senior Cyber Analyst is the senior technical lead within the Cyber Services function, responsible for complex cyber investigations, incident response, threat detection, and security platform optimisation
• Acting as the highest technical escalation point within cyber operations, the role provides leadership, mentoring, and strategic direction to ensure customers maintain a strong and resilient security posture
• Incident Response & Threat Management
• Lead the investigation and resolution of complex cyber security incidents across endpoint, network, cloud, and identity platforms
• Act as the senior escalation point for threat hunting, incident response, and security investigations
• Conduct forensic analysis, identify attack patterns, and provide recommendations to reduce risk and improve resilience
• Security Platforms & Service Improvement
• Own the technical effectiveness and continual improvement of Microsoft Sentinel, Microsoft Defender, SIEM, SOAR, EDR, and XDR capabilities
• Develop and maintain detection rules, use cases, automation, and response playbooks to improve operational efficiency
• Work with the Technical Architect to align security tooling, controls, and services with customer and organisational requirements
• Technical Leadership & Governance
• Provide technical leadership, mentoring, and quality assurance across the Cyber Services team
• Support security governance and compliance activities including ISO27001, Cyber Essentials Plus, and customer assurance requirements
• Produce technical reports, post-incident reviews, threat intelligence briefings, and stakeholder communications
• Collaborate with Service Delivery, Support, Projects, and Product teams to identify and address security risks and service improvements

Benefits

• Autonomy to develop and grow your skills and experience
• Be part of exciting project work that is making a difference in society
• Strong, inspiring and thought-provoking leadership
• A supportive and collaborative environment
• Development access to LinkedIn Learning, a management development programme and training
• Wellness 24/7 Confidential employee assistance programme
• Social - Breakfast Tuesdays, Pizza Thursday monthly, weekly social in the office and commitment to charitable causes
• Time off 25 days a year
• Pension Salary Exchange Scheme with 4% employer contribution and 5% employee contribution
• Discretionary Company Bonus based on company and individual performance
• Life Assurance of 4 times base salary
• Private Medical Insurance which is non-contributory (spouse and dependants included)
• Worldwide Travel Insurance which is non-contributory (spouse and dependants included)
• Benefits Platform offering various retail and leisure discounts

• Strong, inspiring and thought-provoking leadership
• Excellent documentation, analytical, and stakeholder management skills
• Experience designing, tuning, and optimising SIEM, SOAR, EDR, and XDR solutions
• Strong hands-on experience investigating and responding to complex cyber security incidents
• Experience mentoring technical teams and driving operational standards
• Significant experience in a senior Cyber Security, SOC, Threat Detection, or Incident Response role
• Be part of exciting project work that is making a difference in society
• Autonomy to develop and grow your skills and experience
• Ability to translate technical findings and cyber risk into clear business outcomes and recommendations
• Strong understanding of threat hunting, attack techniques, threat intelligence, and vulnerability management
• A supportive and collaborative environment
• Deep technical knowledge of Microsoft security technologies including Sentinel, Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft 365 Security, and Entra ID
• Background in regulated or security-sensitive environments, including public sector, healthcare, local government, or financial services
• Certifications such as SC-200, SC-300, CISSP, GCIH, GCIA, or equivalent
• Knowledge of MITRE ATT&CK, NIST Cyber Security Framework, and Zero Trust principles
• Experience contributing to cyber service development, tooling strategy, or architectural design
• Experience with PowerShell, Python, or security automation technologies