Information Security Analyst

Salary: £63,000 - 103,000 per year

Requirements:

• Background in IT, SOC operations, or other hands-on technical work
• Solid grasp of cloud infrastructure, ideally AWS
• Strong networking knowledge: can read a PCAP, spot beaconing in flow logs, and reason about lateral movement across VLANs and firewalls
• Knowledge of attacker tradecraft, including initial access, persistence, privilege escalation, and exfiltration, and the ability to map an investigation to it
• Comfortable scripting in Python or similar to automate enrichment, triage, and response
• Strong ownership mindset: sees things through end-to-end with little guidance
• Deep familiarity with an EDR platform such as CrowdStrike, SentinelOne, or Defender as an investigation tool
• Detection-as-code experience, including Sigma, detection rules in Git, and CI-tested detections
• SOAR or custom automation experience for response workflows
• Experience defending data centre or colocation environments, including OOB networks, BMC/IPMI, and physical access telemetry
• Experience handling security audits such as ISO27001 or SOC2
• Familiarity with FortiGate logging and NetFlow/sFlow analysis
• DFIR certifications such as GCIH, GCFA, or GCIA are useful but not required
• Experience in energy, fintech, trading, or another high-value-target environment

Responsibilities:

• Act as an escalation point for IT in areas such as IAM, security, and automation
• Act as our security AI champion, building tools to make everyones jobs easier
• Own security monitoring end to end: build and tune log pipelines from AWS, endpoints, identity providers, SaaS audit logs, and network infrastructure into a coherent detection stack
• Write, test, and maintain detection rules that reduce noise and measure coverage against real attacker behaviour
• Lead incident response from detection through containment, eradication, and post-mortem; own the IR runbooks and keep them tested through tabletop exercises
• Perform forensic analysis on compromised endpoints, cloud workloads, and accounts, preserving evidence properly when it matters
• Work with IT to develop and improve security and IT policies and documentation
• Act as the point of contact for the business on external audits and assessments
• Track threat intelligence relevant to energy, trading, and GPU infrastructure and turn it into detections and hunts
• Run vulnerability management from a threat-led angle: prioritise by exploitability and exposure, and drive remediation through the IT and engineering teams who own the fixes
• Monitor the security of our data centre environments and flag anything that breaks the segmentation model
• Feed findings back into prevention by working with IT and engineering to close root causes

Technologies:

• AI
• AWS
• Cloud
• FortiGate
• Flow
• Git
• IAM
• Network
• Python
• Security
• Firewall

More:

We are Fuse Energy, a forward-thinking renewable energy startup on a mission to deliver a terawatt of renewable energy fast. We are building a fully integrated energy company, from developing energy generation projects to real-time power trading and distributed energy installations, and by selling directly to consumers we aim to cut out the middleman, lower costs, and pass on savings to customers. We raised $170M from top-tier investors including Multicoin, Balderton, Lakestar, Accel, Creandum, Lowercarbon, Ribbit, Box Group, and strategic angels. This is a full-time role based within the team that owns security across our IT and cloud environment, spanning AWS infrastructure, identity providers, endpoints, SaaS applications, and our data centre environments. Benefits include a biannual bonus scheme, fully expensed tech to match our needs, paid annual leave, and breakfast and dinner allowance for office-based employees.

last updated 36 week of 2026