Senior Cyber Threat Detection and Response Analyst

Select how often (in days) to receive an alert:

Location:

Portsmouth, GB, PO6 3EN
Westminster, London, GB, W1U 1QX
Devonport, Plymouth, GB, PL2 2BG
Rosyth, Dunfermline, Kirkcaldy, GB, KY11 2YD
Warrington, GB, WA3 6YD
Bristol, GB, BS16 1EJ
Leicester, GB, LE3 1UF

Onsite or Hybrid:
Hybrid

Job Title:
Senior Cyber Threat Detection and Response Analyst

Location:
Any of our main UK locations+ Hybrid Working Arrangements

Role Type:
Full time / Permanent

Role

At Babcock we’re working to create a safe and secure world, together, and if you join us, you can play your part as a Senior Cyber Threat Detection and Response Analyst at any of our main UK locations.

As a Senior Cyber Threat Detection and Response Analyst, you’ll be a technical leader within our Cyber Security Operations capability, driving advanced threat detection, cyber defence, incident response and proactive threat hunting activities. You'll play a vital role in identifying, investigating and responding to complex cyber security threats while helping to shape and continuously improve our security operations capability.

Day-to-day, you’ll have an exciting opportunity to work with leading cyber technologies, collaborate with specialist teams across the organisation, and influence the future direction of our cyber defence strategy. Your expertise will directly contribute to protecting critical business operations while supporting your own professional development within a highly skilled and forward-thinking team.

• Leading complex cyber security investigations and incident response activities.
• Conducting proactive threat hunting to identify emerging threats and vulnerabilities.
• Analysing security alerts, logs and telemetry data to detect malicious activity.
• Collaborating with Threat Intelligence, Security Assurance, Vulnerability Management and IT Operations teams to strengthen cyber resilience.
• Driving continuous improvement of detection capabilities, response processes and cyber defence strategies.

This role is full time, 37.5 hours per week and provides hybrid working arrangements.

• Significant experience within Cyber Security Operations, Incident Response or Threat Detection environments.
• Demonstrable experience investigating and managing complex cyber security incidents.
• Strong knowledge of Security Information and Event Management platforms, Endpoint Detection and Response technologies, and Threat Detection and Response solutions.
• Experience analysing logs, alerts, security telemetry and security incident data.
• Strong understanding of attacker tactics, techniques and procedures, including the MITRE ATT&CK framework.

• Relevant cyber security experience supported by industry-recognised cyber security qualifications.
• GIAC Certified Intrusion Analyst (GCIA)
• GIAC Certified Incident Handler (GCIH)
• GIAC Certified Forensic Analyst (GCFA)
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Microsoft Security Operations Analyst (SC-200)

The successful candidate must be a sole UK national who is able to achieve and maintain Developed Vetting (DV) security clearance for this role.

Many of the positions within our company are subject to national security clearance and Trade Control restrictions. This means that your eligibility for certain roles may be affected by your place of birth, nationality, current or former citizenship, and any residency you hold or have held. Further details are available at United Kingdom Security Vetting: clearance levels -  ()

• Matched contribution…