Senior Cyber Operations AnalystLocation: Birmingham (hybrid)Salary: Up to £75,000 + on-call compensationWe are seeking an accomplished Senior Cyber Operations Analyst to join a high-performing Blue Team operating at the forefront of modern security operations. This is a technical role suited to an experienced analyst with strong engineering instincts, hands-on coding capabilities, and a deep understanding of incident response, detection engineering, and adversary tradecraft.Additional compensation is provided, and frequency may vary by client.This role is ideal for someone who has likely grown from an engineering background and can write scripts (Python, Bash) to automate, enhance, and refine detection and response workflows. Experience with Splunk, SIEM operations, cloud endpoints, networks, and detection engineering will be highly advantageous.Key ResponsibilitiesDevelop, maintain, and optimise detection content (primarily within Splunk SIEM) to identify threats across cloud, endpoint, and network environments.Collaborate across security functions to identify gaps in logging, alerting, and detection coverage aligned to business risk.Conduct security monitoring, alert triage, and continuous improvement of detection rules (core hours 9:0017:30 on rotation).Lead and support incident response investigations, ensuring high-quality documentation and escalation.Mentor and support junior analysts, providing guidance, coaching, and technical oversight.Participate in alert testing, readiness exercises, and incident response tabletop sessions.Stay current on emerging threat intelligence, attacker techniques, and relevant research.Required Experience2+ years experience as a Cyber Security Operations Analyst or equivalentExperience working with SplunkFamiliarity with threat intelligence frameworks and methodologiesEnd-to-end incident response lifecycle experienceDetection engineering and alert development expertise.Strong scripting or programming skills (Python, Bash, C/C++, Java).Solid grounding in cybersecurity fundamentals: network security, cloud security, cryptography, forensics.Understanding of common network protocols and attacker abuse patterns.Knowledge of analysis techniques for Windows and/or Linux environments.
