InfoSec Analyst

Era4 develops, owns and operates AI infrastructure across the UK, powered by renewable energy. Converting legacy industrial and energy sites into modern data-centre facilities, Era4 is combining brownfield regeneration opportunities with cleaner, efficient, scalable compute capacity for healthcare, research, finance, enterprise, and public-sector organisations

Role

Summary:

We are seeking an Infosec Analyst to serve as the primary operational interface into Era4's Security Operations Center (SOC). This role focuses on security monitoring, threat detection, incident response, and protecting our next-generation AI data centre infrastructure, cloud platforms, and applications through proactive security operations.

You will be the key point of contact between security monitoring systems and engineering/operations teams, responsible for monitoring our data centre security estate, identifying threats across network infrastructure and Era4's proprietary cloud platform, coordinating incident response, managing alerts, and continuously improving our security posture.

The successful candidate combines strong technical security knowledge with hands-on experience analysing logs from enterprise firewalls, data centre networking, and proprietary infrastructure platforms, along with excellent communication skills and the ability to triage and elevate issues effectively.

Key Responsibilities:

Security Monitoring & Alert Management:

• Monitor SIEM platforms, security tools, and logging infrastructure across data centre and cloud environments.
• Ingest, parse, and analyse logs from Palo Alto firewalls, Opn Sense, Nokia networking platforms, and Nvidia GPU infrastructure.
• Triage, prioritise and investigate security alerts based on severity and business impact.
• Respond to on-call security incidents outside business hours.
• Perform deep-dive investigations into security incidents and suspicious activities across Era4's data centre and proprietary cloud infrastructure.
• Analyse firewall logs (Palo Alto, Opn Sense), network traffic, system events, and GPU infrastructure telemetry to identify root causes and attack patterns.
• Conduct threat hunting activities to proactively identify indicators of compromise in data centre traffic and network flows.
• Act as primary coordinator for security incident response activities.
• Communicate incident status and impact to stakeholders across engineering and operations teams.
• Document incidents and contribute to post-incident analysis and lessons learned and support remediation efforts.

Vulnerability &

Risk Management:

• Monitor vulnerability disclosures and security advisories relevant to Era4's technology stack.
• Track vulnerability remediation efforts and report on remediation timelines.
• Support vulnerability scanning and assessment activities.

Security Operations & Compliance:

• Maintain and update incident response runbooks, procedures, and playbooks.
• Support compliance activities including log retention, evidence gathering, and audit support.
• Generate security reports and metrics for management and stakeholder review.

Cross-functional Collaboration:

• Serve as primary interface between SOC, engineering, platform, and operations teams.
• Communicate security findings and remediation guidance in clear, actionable terms.
• Support security training and awareness initiatives.

Required Qualifications &

Experience:

• Ability to work independently and manage multiple priorities in a fast-paced environment.
• Experience in security operations, SOC operations, incident response, or infosec analysis.
• Solid knowledge of SIEM platforms, log aggregation, security monitoring tools, analysing firewall logs.
• Hands-on experience investigating security incidents and performing detailed log analysis.
• Demonstrated experience with firewall and network security tools (Palo Alto, pf Sense, Nokia, Opn Sense, or similar).
• Proven understanding of cloud platform security, Kubernetes, and containerized environments.
• Familiarity with NIST incident response framework and incident response procedures, vulnerability management and threat assessment methodologies.

Nice To Have:

• Knowledge of data centre operations (GPU or AL/ML infrastructure is welcome), infrastructure…