Cybersecurity Analyst

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Oversee and assess alerts related to identity, endpoint, email, network, cloud, application, vulnerability, and data protection technologies.

• Confirm, enhance, categorize, prioritize, and investigate security events and incidents.

• Implement sanctioned containment measures and collaborate with Technology Operations on infrastructure-level or production changes.

• Gather and secure evidence while assisting in eradication, recovery validation, increased monitoring, and closure efforts.

• Collect and analyze threat intelligence from a variety of sources including commercial, government, industry, open-source, MDR, vendors, and internal channels.

• Examine threat actors, campaigns, tactics, techniques, procedures, indicators, exploited vulnerabilities, and targeted technologies.

• Develop intelligence products and operationalize insights through investigations, detections, hunting queries, watchlists, blocking actions, phishing simulations, and runbook updates.

• Conduct hypothesis-driven threat hunting utilizing MITRE ATT&CK.

• Validate vulnerability findings, evaluate risk and business exposure, prioritize remediation, identify exploitation, and escalate critical vulnerabilities.

• Collaborate with Security Engineering and coordinate remediation tasks with technology and application owners.

• Manage vulnerability ticket flow, monitor service levels, report overdue exposure, and escalate ownership or delivery issues as necessary.

• Design and maintain approved automation workflows, scripts, and playbooks.

• Ensure the preservation of evidence following approved forensic, legal-hold, integrity, and chain-of-custody protocols.

• Keep comprehensive case records and confirm incident containment and corrective actions.

• Assist with investigations related to breaches, identity, third parties, supply chains, and AI security.

• Carry out MDR monitoring, threat intelligence analysis, threat hunting, vulnerability validation, remediation follow-up, metrics reporting, case documentation, and authorized security tool actions.

• Elevate architectural, complex integration, detection platform design, routine vulnerability management administration, and permanent engineering requirements to Security Engineering.

• Facilitate structured handovers across operational regions.

• Provide technical evidence to Legal and Privacy departments.

⛳️ Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Digital Forensics, or a related field, or equivalent practical experience.

• Proven experience and expertise in cybersecurity operations, incident response, IT operations, system administration, network security, or a similar field.

• Experience in investigating alerts using SIEM, EDR/XDR, identity, email, cloud, network, or vulnerability technologies.

• Understanding of common attacker techniques including phishing, malware, account compromise, privilege misuse, lateral movement, exfiltration, and vulnerability exploitation.

• Proven ability to apply threat intelligence and incident telemetry to prioritize vulnerabilities and assess exploitation risks.

• Familiarity with security automation or scripting, digital evidence management, identity investigations, third-party incident analysis, and structured case management.

• Experience using Microsoft Defender, Microsoft Sentinel, Microsoft 365, Azure, identity security, privileged access management, cloud security, and endpoint environments.

• Knowledge of MITRE ATT&CK and established detection, threat-hunting, and incident response methodologies.

• Understanding of vulnerability scanning and remediation processes, as well as the separation of duties between vulnerability program governance, threat-led escalation, and asset-owner remediation.

• Familiarity with NIST CSF, ISO 27001, PCI DSS, NYDFS cybersecurity requirements, or privacy and breach response obligations.

• Willingness to support designated US business-hour coverage and participate in escalation or on-call rotations.

• Availability to assist with high-severity incidents outside of regular working hours as needed.

• Capacity to handle confidential, legally sensitive, and security-restricted information with the utmost care.

🏝️ Benefits

• Monthly bonuses.

• Restricted Stock Units; new hire grants vest over four years.

• Private medical insurance and health cash plans.

• 33 days of annual leave including bank holidays.

• Five-week sabbatical after five years of employment.

• Open, casual, and enjoyable office environment.

• Cycle to work scheme.

• Life Insurance, Critical Illness Cover, and Group Income Protection.

• Lifestyle Spending Account.

• Employee Assistance Programs providing Mental Health Support, Medical Referrals, Legal and Financial Support, and various perks.