Job Title: Senior Cyber Operations Analyst (AVP Level)
Location: London (Hybrid – 3 days on-site, 1 day remote)
Shift Pattern: 4-on, 4-off (08:00–20:00, 12-hour shifts)
Cyber threats don’t sleep — and neither do we. We’re looking for a sharp, adaptable and experienced Senior Cyber Operations Analyst to join our global security operations in Tier 1 Financial organisation. You’ll be part of a dynamic, round-the-clock team, responding to real-world threats and keeping our organisation safe from sophisticated cyber attacks.
This is more than just a monitoring role. You’ll go beyond the alerts, conducting in-depth investigations, leading response efforts, and helping shape how we defend against the next wave of cyber threats.
What You’ll Be Doing
* Monitor and manage a suite of security tools (SIEM, IDS/IPS, DLP, and others) to detect and respond to threats in real-time.
* Triage, investigate and escalate incidents with sound judgement — this isn’t checkbox security work.
* Dive deep into data using PCAP, endpoint logs, network telemetry and behavioral analytics.
* Hunt for threats proactively, leveraging threat intelligence, patterns, and instincts built from experience.
* Work cross-functionally with other teams to contain, mitigate and learn from security incidents.
* Act as a mentor to Tier 1 analysts, sharing your knowledge and helping to build the next line of cyber defenders.
* Feed lessons learned into stronger controls, better tooling and smarter monitoring.
What You Bring
You’re not new to this. You’ve been in the trenches and know what it takes to stay ahead of threat actors. Ideally, you bring:
* Hands-on experience with SIEM platforms, especially Splunk.
* Strong familiarity with MITRE ATT&CK, intrusion detection/prevention systems, and malware behaviour.
* Confidence in network traffic analysis (PCAP, NetFlow) and endpoint forensics.
* The ability to explain technical risk in plain English — whether you’re talking to a peer or a business stakeholder.
* A proactive mindset — you don’t wait to be told what to investigate; you follow your nose.
Bonus points if you also have:
* An understanding of cloud environments (AWS, Azure, GCP) and how to secure them.
* Familiarity with data loss prevention technologies.
* A solid grasp of both Windows and Linux security fundamentals.
* Experience working in a regulated environment or financial services — though it’s not a dealbreaker.
What You’ll Get
* The chance to work in a mission-critical, global cyber team, where your actions have real-world impact.
* A collaborative and learning-focused environment — where curiosity is encouraged and growth is supported.
* Rotating shift pattern that gives you extended time off between blocks of work.
* Competitive compensation, benefits, and the chance to grow into more senior leadership or technical specialist roles over time.