Senior Cyber Security Analyst in City of London

Global law firm in London City is seeking a Senior Cyber Security Analyst for a hybrid role (3 days in the office, 2 days remote). This position is a new role aimed at expanding the firm's Cyber Security operations and capacity. Experience within a law firm or professional services group is advantageous.

You will work closely with the Cyber team and IT colleagues to ensure systems and services are secure and stable, enabling the firm to deliver outstanding service to clients and achieve strategic goals. The cybersecurity operations team will manage identified threats and risks while ensuring adherence to standards.

Key Responsibilities include:

• Provide expertise and cybersecurity requirements to the firm's change programme to ensure security best practices are embedded into initiatives and security by design principles are applied.
• Provide 3rd line support to the IT service desk, responding to escalated support requests and incident tickets, including out-of-hours support through an on-call rota.
• Undertake routine monitoring of security alerts generated by systems, investigating, analysing, and responding as required.
• Co-ordinate and undertake regular reviews of security tools to ensure they are operational and updated with new features or changes.
• Co-ordinate and undertake threat modelling to identify and analyse potential security threats, ensuring necessary controls are in place.
• Co-ordinate and undertake regular threat hunting, analysing logs and event data, and procuring threat intelligence.
• Provide technical leadership during security incident response, from identification to post-incident review, liaising with external IR providers as needed.
• Maintain incident response playbooks and conduct regular IR exercises.
• Ensure clear roles and responsibilities for the internal team and managed service security providers, ensuring seamless operation.
• Ensure day-to-day operations of IT systems comply with the firm's security policies and standards.
• Conduct risk assessments and recommend security improvements.
• Provide guidance on secure configuration and hardening of systems.
• Manage penetration testing activities conducted by third-party testers and any required remediation.
• Fulfil 3rd line support and service request tickets.
• Develop, document, and maintain security procedures and operational documentation.
• Oversee and drive vulnerability management activities with technical systems owners.
• Ensure audit trails, system logs, and other monitoring data sources are regularly reviewed and compliant with policies.
• Provide out-of-hours support for security incidents.

Key Skills & Experience Required:

• 5+ years' experience in cybersecurity or information security.
• Bachelor's Degree in Cybersecurity or similar; industry certifications such as CompTIA Security+, GIAC, CISM, CISSP or other relevant certifications preferred.
• Strong understanding of network and endpoint security, incident response, threat intelligence, and vulnerability management.
• Experience with security tools such as SIEM platforms, EDR/XDR solutions, firewalls, IDS/IPS.
• Strong knowledge of Microsoft Azure cloud security technologies and concepts.
• Familiarity with cybersecurity frameworks such as NIST CSF, ISO27001, CIS Controls.
• Strong analytical and problem-solving skills.
• Good understanding of best practice security operations and architectures.
• Knowledgeable on security and data protection legislations and regulations.