Senior IT Security Analyst

Senior IT Security Analyst required to act as a senior technical contributor within a global cyber security team, owning selected cyber security domains end-to-end and driving practical improvements to reduce cyber risk.

The role combines analyst and engineering responsibilities across security tools, vulnerability and exposure management, web and email security, incident response, and threat-informed remediation.

The role works closely with infrastructure, cloud, application, identity and business teams to identify security issues, prioritise actions based on real-world attacker behaviour, and deliver measurable improvements to the organisation cyber defence posture.

Owned or materially contributed to one or more cyber security domains, such as endpoint security, vulnerability management, identity security, network security, incident response or Microsoft 365 / Azure security.

Used CrowdStrike or equivalent EDR tooling to investigate detections, support incident response and improve endpoint security controls.

Used Zscaler ZIA/ZPA or equivalent secure web gateway, private access, zero trust or network access security technologies.

Performed vulnerability assessment, exposure analysis or remediation prioritisation across enterprise technology environments.

Applied threat intelligence, MITRE ATT&CK or exploitation-based evidence to prioritise mitigations.

Supported or led cyber security investigations and incident response activities.

Collaborated with infrastructure, cloud, application, identity and business teams to deliver security improvements.

Used scripting, queries, automation or data analysis to improve security outcomes.

• Strong hands-on experience administering, tuning and operationalising CrowdStrike Falcon, including endpoint protection, EDR investigations, detection analysis and response workflows.
• Strong hands-on experience administering and supporting Zscaler ZIA and ZPA, including policy design, access control, traffic analysis and security troubleshooting.
• Practical experience leading or supporting vulnerability and exposure management programmes, including vulnerability analysis, risk-based prioritisation, remediation tracking and validation of control effectiveness.
• Strong knowledge of real-world attacker tactics, techniques and procedures (TTPs) and the ability to translate threat intelligence, attack paths and exploitation trends into actionable security improvements.
• Experience conducting security investigations and incident response activities, including alert triage, root cause analysis, containment, remediation and lessons learned.

This is a hybrid role working 3 days a week in the London office and 2 days remotely.