Cyber Security Analyst Senior in London

This is a highly visible opportunity to join a growing global Cyber Defence function at an exciting stage of transformation and centralisation. Cyber security remains a core strategic priority for the organisation as it continues to modernise operations and strengthen resilience across a complex international environment. The successful individual will play a critical role in strengthening operational security capabilities while helping shape the future direction of the team as the wider security function evolves.

We are seeking an experienced Senior Cyber Security Analyst to join a global Cyber Defence function. The environment is heavily Microsoft-focused, with particular emphasis on:

• Microsoft Sentinel
• Microsoft Defender XDR
• Azure security and secure-by-design principles
• Detection engineering and automation
• Threat and vulnerability management

You will work closely with global technology and cyber teams to continuously improve monitoring, detection, response and remediation capabilities across hybrid cloud and on-premise environments.

Key Responsibilities

• Incident Response & Major Incident Management
  • Lead the end-to-end management of cyber security incidents across global environments.
  • Assess technical, operational and commercial impact to support effective decision-making under pressure.
  • Conduct root cause analysis and ensure lessons learned are embedded into operational processes and controls.
• Detection Engineering & Security Automation
  • Configure, optimise and continuously improve Microsoft Sentinel and Microsoft Defender technologies.
  • Integrate Microsoft security tooling with third-party technologies and service providers.
  • Identify monitoring gaps and improve visibility across cloud and on-premise environments.
  • Maintain high-quality technical documentation for detections, automations and operational workflows.
• Cloud Security & Secure-by-Design
  • Support secure configuration and operational security across Azure and associated cloud services.
  • Evaluate configuration changes and ensure alignment with security standards and controls.
  • Support implementation and optimisation of Microsoft Defender security policies across endpoint, identity, cloud and email platforms.
  • Work with tools such as Microsoft Defender Vulnerability Management and Tenable to identify and prioritise vulnerabilities.
  • Leverage cyber threat intelligence to improve detection capabilities and prioritisation decisions.
  • Track remediation progress and provide meaningful risk reporting to cyber leadership.
• Stakeholder Management & Collaboration
  • Partner with Group IT, Regional IT and wider technology teams across multiple geographies.
  • Balance technical risk with operational realities and business priorities.
  • Contribute to a positive cyber security culture and continuous improvement mindset across the business.

What We're Looking For

Essential Experience

• Proven experience leading cyber security incidents end-to-end within enterprise environments.
• Experience operating within hybrid cloud and on-premise environments.
• Hands-on experience with Microsoft Sentinel, Microsoft Defender XDR and Azure security technologies.
• Exposure to vulnerability management platforms such as Tenable or Microsoft Defender Vulnerability Management.

Technical Skills

• Strong Microsoft security ecosystem expertise.
• Experience building automation workflows using Logic Apps or similar technologies.
• Knowledge of cloud security principles across Azure and ideally AWS or Google Cloud.
• Calmness under pressure.
• Strong ownership and accountability.
• Excellent communication and stakeholder management skills.
• Commercial awareness alongside technical depth.
• Gravitas and confidence leading senior incident discussions.
• The ability to know when to stop investigating and start managing the wider incident process.

What's on Offer

• Highly visible role within a growing global cyber security function.
• Genuine ownership and influence across security operations.
• Opportunity to shape and mature cyber defence capabilities globally.
• Strong balance of technical depth and business engagement.
• Clear long-term progression opportunities as the team expands.
• Flexible hybrid working with only 1 day per week onsite in Central London.

To apply for this fantastic opportunity please send your CV.