Salary: £65,000 - 75,000 per year Requirements: We require strong experience in security operations, including incident detection, investigation, response, and root cause analysis. We require hands-on experience with Microsoft Defender XDR and related security tooling. We require experience using SIEM platforms, ideally Microsoft Sentinel, with strong KQL querying skills. We require a strong understanding of threat detection, incident response, and remediation coordination. We require experience working in regulated environments, ideally within financial services. We require knowledge of networking, operating systems, including Windows and Linux, and core security fundamentals. We require strong analytical and problem-solving skills, with the ability to work independently. We require experience collaborating with cross-functional technical teams. We prefer experience with vulnerability management tools such as Qualys. We prefer experience with attack simulation and exposure validation tools such as AttackIQ and XM Cyber. We prefer knowledge of threat intelligence and malware analysis. We prefer awareness of security frameworks such as MITRE ATT&CK, NIST, and ISO 27001. We prefer basic scripting knowledge in PowerShell, Python, or Bash. Responsibilities: We monitor and investigate alerts across Microsoft Defender, SIEM platforms, and other security tooling. We own security incidents end-to-end, including investigation, containment, resolution, and remediation coordination. We perform deep-dive investigations using KQL and multi-source telemetry. We correlate data across endpoint, identity, cloud, and network environments. We assess threat severity and risk in line with client and regulatory context. We coordinate response actions with IT, cloud, and platform teams. We escalate complex incidents to security engineering or leadership when required. We conduct vulnerability scanning and review findings. We run breach and attack simulations and exposure validation exercises. We perform web application scanning and triage vulnerabilities. We execute proactive threat hunting aligned to MITRE ATT&CK. We optimise detection rules and reduce false positives. We validate and maintain the effectiveness of our security tooling. We drive remediation actions through to completion across multiple teams. We produce clear documentation, incident reports, and audit-ready records. Technologies: Bash Cloud Linux Network PowerShell Python Security Web Windows More: We are hiring a Senior Security Analyst for a hands-on security operations role within a regulated financial services environment. You will join a small, senior team providing 24/7 operational coverage on a 12-hour shift pattern, working 4-on / 4-off including nights and weekends. In this role, we focus on continuous improvement of our security posture through proactive threat hunting, vulnerability management, tooling validation, and strong incident response practices. last updated 22 week of 2026