Senior Global Security Operations Centre Analyst

## Senior Global Security Operations Centre Analyst Apply:
Windsor:
Full time:
Posted Today:
End Date:
October 10, 2026 (11 days left to apply):
R0088000
** Join us, be part of more.
** We’re so much more than an energy company. We’re a family of brands revolutionising how we power the planet. We're energisers. One team of 21,000 colleagues that's energising a greener, fairer future by creating an energy system that doesn’t rely on fossil fuels, whilst living our powerful commitment to igniting positive change in our communities. Here, you can find more purpose, more passion, and more potential.

That’s why working here is #MoreThanACareer. We do energy differently - we do it all. We make it, store it, move it, sell it, and mend it.
** An opportunity to play your part
- ** At Centrica, our Global Security Operations Centre (GSOC) is at the forefront of protecting our business from evolving cyber threats. As a Senior Global Security Operations Centre Analyst, you'll be the key technical escalation point between our Security Analyst team and the Cyber Security Incident Response Team (CSIRT), leading complex investigations and supporting the response to significant security incidents.  Working across cloud, endpoint, identity, and network technologies, you'll play a critical role in strengthening our cyber defences while helping shape the future of security operations through threat hunting, automation, AI-assisted workflows, and continuous improvement.

If you're passionate about cyber security, enjoy solving complex challenges, and want to make a real impact, we'd love to hear from you.
** Location**: UK-based hybrid role, Occasional travel to site.
** Day to day
- *** Lead complex cyber security investigations across Centrica, acting as the primary technical escalation point within the GSOC and supporting incident response before escalation to CSIRT where required.
* Investigate and respond to threats across cloud, endpoint, identity, email, network and Operational Technology (OT) environments, assessing impact and driving effective response actions.
* Manage incidents through the full lifecycle, coordinating containment, remediation, recovery and post-incident reviews while balancing cyber risk and business priorities.
* Proactively hunt for threats and partner with Threat Intelligence and Detection Engineering teams to identify emerging risks, improve detections and strengthen security visibility.
* Develop and enhance detection rules, analytics, use cases and response playbooks, helping continuously improve our security operations capability.
* Mentor and support Security Analysts by providing technical guidance, knowledge sharing and oversight during complex investigations, helping the team grow and succeed.
* Collaborate with Cyber Defence, Technology and business teams to drive operational excellence, support automation and AI-assisted security operations, produce clear incident reporting, and participate in the GSOC on-call rota.
** What are the must haves
*** Proven experience working within a Security Operations Centre (SOC), Cyber Defence, Threat Hunting, Incident Response or a similar cyber security function, with the ability to lead complex investigations and act as a technical escalation point.
* Strong analytical and problem-solving skills, with the confidence to assess risk, make informed decisions and remain composed during high-pressure cyber incidents.
* Hands-on experience with Microsoft Sentinel, Microsoft Defender, SIEM and EDR technologies, with a strong understanding of security monitoring, detection and response.
* Good knowledge of modern technology environments, including Microsoft Azure, AWS, SaaS platforms, identity services and enterprise infrastructure, alongside an…