Senior Cyber Security Operations Analyst

We are seeking an experienced Senior Cyber Security Operations Analyst to join our team.

The ideal candidate will have a strong background in cloud security, incident response, and vulnerability management.

Working with greater independence than an analyst, you will take ownership of complex investigations, drive improvements to security processes, and support the development of those around you — without being a team lead.

• Own and lead complex incident response investigations end-to-end, from detection through to post-incident review, without direct supervision.
• Investigate security breaches and provide detailed reports on findings and recommendations.
• Coordinate with IT teams to ensure timely resolution of security incidents, acting as a point of escalation for complex or ambiguous events.
• Participate in and help plan regular Audits, Tabletops, and Purple Team exercises; share lessons learned with the team.
• Perform alert triage and severity assessment on incoming security alerts from multiple sources.
• Investigate phishing incidents including email header analysis, sender verification, and payload identification; coordinate remediation.
• Conduct data exfiltration investigations: scope of compromise, affected data identification, business impact assessment, and containment coordination.
• Perform endpoint forensics including process analysis, malware identification, timeline reconstruction, and evidence collection.
• Document findings with detailed incident timelines and evidence preservation for audit compliance.
• Execute containment actions and coordinate with IT teams.
• Participate in the Cyber Security on-call rota, providing out-of-hours support for security incidents, critical alerts, and escalations.

• Stay up-to-date with the latest security trends, threats, and technologies; proactively share insights with the team.
• Provide technical advice and support to other departments on security-related matters.
• Mentor and support junior analysts, sharing knowledge and helping them grow.
• Identify gaps in security processes and take ownership of improving them.
• Conduct training sessions to educate staff on security best practices.
• Prepare and deliver comprehensive reports on security assessments and incident responses.
• Manage and maintain security tooling and infrastructure e.g. Defender XDR, DLP, security configuration management tools.
• Coordinate with internal teams and external parties to resolve incidents and track remediation.

• Evaluate and implement cloud security solutions to protect against breaches and data loss.
• Lead risk assessments and security audits for cloud environments; own the output and follow-through.
• Develop and maintain cloud security policies and procedures, identifying gaps and driving resolution.

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• 5+ years of experience in cybersecurity, with a focus on cloud security, incident response, and vulnerability management.
• Relevant certifications such as CompTIA Security+, Blue Team Level 1 (BTL1), GIAC Certified Incident Handler (GCIH) or GIAC Security Operations Certified (GSOC).
• Strong understanding of cybersecurity frameworks, standards and regulations (e.g., NIST, ISO 27001, Cyber Essentials, GDPR).

• Experience with cloud platforms such as Azure, AWS and various SaaS products.
• Knowledge of scripting languages (e.g., Python, PowerShell) for automation.
• Experience with security tools such as SIEM, IDS/IPS, and vulnerability scanners; able to develop and tune detection rules independently.
• Excellent problem-solving skills and attention to detail; targets results, accepts accountability, and pushes through obstacles.
• Hands-on experience with Defender Endpoint and endpoint detection and response (EDR) tools.
• Experience with endpoint management and remediation tools.
• Malware analysis basics: identifying malware families, extracting IOCs, and correlating with threat intelligence.
• Log analysis and SIEM query experience to investigate security events.
• Ability to work under pressure, escalate appropriately, and communicate clearly during incidents.
• Strong communication skills, both written and verbal; able to influence and build buy-in across teams without relying on authority.
• Demonstrates initiative: tackles problems independently, generates ideas, and challenges the status quo to make things better.
• Proactive self-developer: seeks out feedback, keeps skills current, and turns learning opportunities into practice.
• Leads by example in living company values — quality-focused, collaborative, and committed to continuous improvement.

Why Version 1?

At Version 1, we believe in providing our employees with a comprehensive benefits package that prioritises their wellbeing, professional growth, and financial stability.

Share in our success with our Quarterly Performance-Related Profit Share Scheme, where employees collectively benefit from a share of our company's profits

Strong Career Progression & mentorship coaching through our Strength in Balance & Leadership schemes with a dedicated quarterly Pathways Career Development programme

Flexible/remote working, Version 1 is tremendously understanding of life events and people’s individual circumstances and offer flexibility to help achieve a healthy work life balance

Financial Wellbeing initiatives including; Pension, Private Healthcare Cover, Life Assurance, Financial advice and an Employee Discount scheme

Employee Wellbeing schemes including Gym Discounts, Bike to Work, Fitness classes, Mindfulness Workshops, Employee Assistance Programme and much more.

Generous holiday allowance, enhanced maternity/paternity leave, marriage/civil partnership leave and special leave policies