Senior Cyber Security Analyst

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Oversee the comprehensive response to high-severity security incidents, ensuring effective containment and recovery.

• Perform post-incident analyses and serve as the senior technical lead during P1/P2 events.

• Design, create, and enhance SIEM detections.

• Sustain MITRE ATT&CK coverage and pinpoint monitoring deficiencies.

• Operationalize threat intelligence and assist in vulnerability management initiatives.

• Craft playbooks, automated response workflows, alert enrichment capabilities, and facilitate tool integrations.

• Act as the primary escalation point for Security Operations.

• Mentor analysts and contribute to threat modeling efforts.

• Provide security insights for architectural and engineering decisions.

• Manage operational metrics and performance reporting.

• Communicate risks to stakeholders and contribute to evidence and control monitoring for compliance.

• Enhance detection and response capabilities, minimize false positives, and bolster security posture.

• Support security assurance for projects and incorporate monitoring requirements into new services and platforms.

⛳️ Requirements

• Proven track record in a Security Operations, Cyber Security Analyst, Security Engineer, or Incident Response role, with a focus on leading intricate security investigations and major incident response efforts.

• Strong practical experience with SIEM platforms, encompassing detection engineering, alert tuning, correlation rule development, coverage mapping, and ongoing enhancement of monitoring capabilities.

• Demonstrated experience managing security incidents from initial triage to containment, recovery, and post-incident review, including stakeholder engagement during high-severity situations.

• Hands-on experience utilizing the MITRE ATT&CK framework in detection engineering, threat hunting, investigations, threat modeling, or security control assessments.

• Experience in developing or supporting security automation and orchestration workflows, including playbooks, automated response actions, and integrations among security tools.

• Familiarity with cloud security technologies, endpoint detection and response (EDR/MDR) solutions, threat intelligence, and vulnerability management processes.

• Excellent communication skills to articulate technical security risks, threats, and vulnerabilities into clear, business-oriented recommendations.

• Experience in mentoring, coaching, or providing technical guidance to junior analysts.

• Ability to support compliance with ISO 27001, SOC 2, and NIS2 requirements.

🏝️ Benefits

• 25 days of holiday plus bank holidays.

• Option to purchase or sell 5 additional annual leave days each year.

• Vitality Health Insurance, which includes private healthcare, virtual GP access, mental health support, and wellness perks (50% discount on gym memberships at Virgin Active, Nuffield, PureGym).

• Pension plan with a 5% matched contribution.

• Regular team and company-wide events.

• 2 volunteering days per year to make a positive impact.

• Remote-first working environment with offices located in London and Nottingham.