Senior Security Analyst

London (hybrid working, 3 days per week onsite)

Up to £80,000 PA plus bonus

This is a huge opportunity with a fantastic business - an extremely exciting global entertainment organisation.

They are seeking an experienced, Senior Security Analyst to join a growing security team where protecting their intellectual property is highly critical to the business. It's a key role with accountability for vulnerability and exposure management, security monitoring, incident response and risk. You’ll be working with closely with a small, highly dedicated, highly capable team.

It is a broad, hands-on position and would suit someone who has built strong technical experience within a SOC, but who does not want to be limited to one narrow area of Security Operations.

You’ll work across a predominantly Microsoft environment (although there is some first-class Open Source security tooling in place), helping to detect and respond to security threats, manage vulnerabilities end to end, improve security tooling and strengthen the organisation’s overall security posture.

Responsibilities:

• Investigate and respond to security alerts and incidents at Tier 2/3 level, using your own technical judgement rather than simply following predefined playbooks
• Own and continuously improve the Vulnerability Management lifecycle, covering discovery, analysis, prioritisation, remediation and tracking
• Drive wider Exposure Management activity across cloud, on-premise and third-party environments
• Work closely with technical teams and system owners to ensure vulnerabilities are understood and remediated in line with business risk
• Monitor and respond to threats across Microsoft Entra and M365, including identity-related incidents and account compromise
• Support security hardening, IAM, architecture and deployment activity across the Microsoft environment
• Investigate security events using platforms including Microsoft Defender XDR and EDR tooling
• Analyse structured security and log data to identify malicious or suspicious activity.
• Support the management of major Cyber Security incidents and coordinate response activity with relevant stakeholders
• Use threat intelligence to identify emerging risks and drive proactive security activity.
• Support Security Risk Management activities, including third-party security assessments.
• Help improve detection capability, including opportunities around MITRE ATT&CK-aligned detection engineering
• Identify opportunities to automate repetitive SOC processes using SOAR, orchestration and AI-assisted tooling

Requirements:

• Strong previous experience working within a SOC environment, ideally at Level 2 or 3
• Experience handling security incidents independently and making technical decisions during investigations
• Strong end-to-end Vulnerability Management experience, covering discovery, analysis and remediation
• Strong technical knowledge of Microsoft Entra, including security monitoring, incident response, IAM and hardening
• Experience securing both cloud and on-premise environments
• Strong understanding of attacker tactics, techniques and procedures
• Experience working with technologies such as Defender XDR, SIEM, EDR, Vulnerability Management and SOAR platforms
• Familiarity with security and vulnerability frameworks (e.g. MITRE ATT&CK, CVSS, KEV, NIST)
• Ability to query and analyse structured security and log data
• A broader technical IT background, ideally across areas such as infrastructure, systems administration, networking or IT support