Senior Cyber Security Analyst

We are Lightsource bp– and we're on a mission to become a global leader in onshore renewables, anchored by our proven track record in solar development. For over a decade we've been actively working to diversify the way our world is powered with sustainable and responsible renewable power. We work to safely deliver affordable, reliable, large-scale onshore renewable and energy storage solutions to help the world decarbonise.

Our growing business is constantly innovating and investing to help drive the energy transition. Our people and projects are focused on supporting long-term sustainable growth and energy security. Lightsource bp operates with five core values:
Safety, Integrity, Respect, Sustainability, and Drive. We seek to attract and hire individuals who share our commitment to creating a safe workplace, uphold the highest standards of integrity, and demonstrate respect for colleagues, communities, and the environment. Our recruitment process promotes sustainability by valuing long-term growth and responsible practices, while seeking candidates with the drive to innovate and lead in the global energy transition.

Together, these values shape how we engage, assess, and welcome talent to join us in delivering transformational solar power solutions worldwide. Lightsource bp was fully acquired by bp in 2024. What you'll do (the role) Summary We are seeking a dynamic, hands-on Senior Cybersecurity Analyst to monitor cyber risk and lead the remediation of identified vulnerabilities across Lightsource bp's IT systems globally.

You will be responsible for threat detection, investigation, and incident response, leveraging a modern security technology stack with a strong focus on the Microsoft Defender ecosystem. Working across multiple business areas and time zones, you will proactively hunt for security issues, assess emerging threats, and partner with infrastructure and support teams to strengthen our security posture and drive business cyber maturity.

Responsibilities of the Role Continuously monitor the organization's security systems and infrastructure using SIEM, EDR, and related toolsets to detect signs of compromise and investigate security events to completion Proactively conduct threat hunting using threat intelligence frameworks (MITRE ATT&CK, Cyber Kill Chain) and available security platforms to identify and mitigate emerging threats Assess new and evolving cyber threats to the business, optimizing existing Microsoft Defender technologies and other security solutions to better counter identified risks Identify vulnerabilities in systems and applications;

collaborate with Infrastructure, Digital Workplace, and Support teams to prioritize, patch, and remediate issues in a timely manner Manage core Security Operations (Sec Ops) tooling platforms, ensuring correct configuration, maximizing security value from existing investments, and maintaining high-quality configuration documentation Communicate proactively with stakeholders across the business, providing clear technical and non-technical updates during investigations and escalations Support the development, enforcement, and continuous improvement of cloud security policies, standards, and procedures in alignment with industry frameworks (NIST 2.0, CIS, NIS2) and regulations Create and maintain security awareness training content and assist in its delivery to colleagues across the organization Why you'll make a great member of the team Experience & Knowledge

Required Experience:

5+ years of professional experience in cybersecurity, with at least 2+ years in a Security Operations Center (SOC) or incident response role Advanced proficiency with Microsoft Defender XDR and expert-level knowledge of Microsoft Sentinel, including KQL query writing and analytics rule development Strong hands-on experience with Microsoft Defender for Endpoint, including policy configuration and threat investigation Demonstrable experience responding to cyber threats and working in an Azure-focused cloud environment Proven experience with the Cyber Kill Chain, MITRE ATT&CK, and other security defence and intelligence frameworks Experience in stakeholder…