Hybrid Senior Cyber Defence Operations Analyst

at Insight Investment

• Job title: Senior Cyber Defence Operations Analyst
• Job type: Full Time
• Experience level: Senior
• Salary: Not specified
• Degree requirement: No Education Requirement
• Tech skills: Azure, Cyber Security, Splunk
• Location requirements: Hybrid, London, United Kingdom

About the role

• Senior Cyber Defence Operations Analyst maintaining and improving operational security processes for Insight Investment. Leading incident response, vulnerability management, and threat hunting activities.

Responsibilities

• Lead, investigate, record and respond to SIEM alerts, determine scope and severity of incidents, and coordinate containment and remediation efforts.
• Define, implement and continuously improve operational security processes and runbooks to align with compliance standards and evolving threats.
• Assist with integrating and configuring security tooling, ensuring effective data ingestion, enrichment and alerting across the environment.
• Lead threat hunting activities to proactively identify suspicious behaviour and improve detection coverage.
• Deliver effective vulnerability management: analyse scanning outputs, coordinate with technology teams and ensure timely notification and remediation tracking.
• Participate in the out-of-hours, on-call rotation, supporting incident response efforts during non-core hours.
• Enforce security processes and requirements across the business.

Requirements

• Previous ownership of the incident response, vulnerability management or SIEM monitoring solution processes and procedures.
• Knowledge of SIEM tooling, designing and implementing use cases & documenting KBAs.
• Strong knowledge of KQL.
• Proven experience in incident response and handling.
• Experience contributing to cybersecurity operations in a professional or structured environment.
• Demonstrated commitment to continuous self-study.
• Experience working with an MSSP.
• Technical knowledge of access management and security controls.
• Strong collaboration skills with the ability to work across teams and stakeholders.
• A strong desire to drive security innovation across the firm.
• Relevant technical cyber security certifications are desirable.
• Knowledge on task automation/scripting would be hugely beneficial.
• Experience with Microsoft suite (Defender/Azure), query-based SIEM (e.g. Sentinel, Splunk) and orchestration platforms.
• Experience in financial services or other highly regulated environments.
• Prior involvement in threat hunting activities.