Senior Cyber Security Analyst - London

Salary: £54,000 - 94,000 per year

Requirements:

• Proven experience leading cyber security incidents end-to-end within enterprise environments.
• Strong background in Security Operations, Cyber Defence, Incident Response, or Blue Team functions.
• Experience operating within hybrid cloud and on-premise environments.
• Hands-on experience with Microsoft Sentinel, Microsoft Defender XDR, and Azure security technologies.
• Experience with detection engineering, threat detection, and security automation.
• Exposure to vulnerability management platforms such as Tenable or Microsoft Defender Vulnerability Management.
• Experience managing stakeholder communications during high-severity incidents.
• Strong understanding of attacker tactics, techniques, and procedures (TTPs).
• Advanced KQL experience for investigations, detections, and reporting.
• Experience building automation workflows using Logic Apps or similar technologies.
• Knowledge of cloud security principles across Azure and ideally AWS or Google Cloud.
• Familiarity with industry frameworks such as NIST and ISO 27001.

Responsibilities:

• Lead the end-to-end management of cyber security incidents across global environments.
• Own incident triage, severity assessment, and response coordination across P1-P4 incidents.
• Lead incident bridge calls and coordinate technical and business stakeholders throughout the incident lifecycle.
• Assess technical, operational, and commercial impact to support effective decision-making under pressure.
• Provide clear, calm, and structured communications to technical teams and senior leadership.
• Drive containment, eradication, recovery, and post-incident improvement activities.
• Conduct root cause analysis and embed lessons learned into operational processes and controls.
• Develop and maintain incident response procedures, playbooks, and documentation aligned to industry best practice.
• Configure, optimise, and continuously improve Microsoft Sentinel and Microsoft Defender technologies.
• Develop and tune detection logic using KQL to identify emerging threats and attacker behaviours.
• Build and maintain automated SOAR workflows using Logic Apps and related technologies.
• Integrate Microsoft security tooling with third-party technologies and service providers.
• Identify monitoring gaps and improve visibility across cloud and on-premise environments.
• Maintain high-quality technical documentation for detections, automations, and operational workflows.
• Support secure configuration and operational security across Azure and associated cloud services.
• Collaborate with infrastructure and engineering teams to embed secure-by-design principles.
• Evaluate configuration changes and ensure alignment with security standards and controls.
• Support implementation and optimisation of Microsoft Defender security policies across endpoint, identity, cloud, and email platforms.
• Contribute to the continuous improvement of cloud security posture across global operations.
• Support and enhance the vulnerability management programme across infrastructure, cloud, and endpoint environments.
• Work with tools such as Microsoft Defender Vulnerability Management and Tenable to identify and prioritise vulnerabilities.
• Translate vulnerability findings into actionable remediation plans with technology stakeholders.
• Leverage cyber threat intelligence to improve detection capabilities and prioritisation decisions.
• Track remediation progress and provide meaningful risk reporting to cyber leadership.
• Partner with Group IT, Regional IT, and wider technology teams across multiple geographies.
• Act as a trusted advisor across operational security, incident response, and cyber defence activities.
• Balance technical risk with operational realities and business priorities.
• Contribute to a positive cyber security culture and continuous improvement mindset across the business.

Technologies:

• AWS
• Azure
• Cloud
• Support
• Security
• Embedded

More:

We are a growing global organisation undergoing transformation and centralisation of our cyber defence function. This is a highly visible Senior Cyber Security Analyst role based in Central London, with a hybrid working model of one day per week onsite and a salary of up to 85,000 plus excellent benefits. You will join a Microsoft-focused environment with strong exposure to incident response, detection engineering, cloud security, and vulnerability management, while helping shape the future direction of our security team. The role offers genuine ownership, senior stakeholder exposure, and strong long-term progression potential as our team expands.

last updated 34 week of 2026