Cyber Defence SecOps Analyst

We are seeking a skilled Cyber Defence SecOps Analyst to join our global security team. The ideal candidate will have hands-on experience in security operations, vulnerability management, incident response, and threat hunting within an enterprise environment. This role involves supporting vulnerability assessment and remediation, investigating security incidents, managing asset and scan coverage, and maintaining security tooling. The candidate must be adaptable to support multiple workstreams and participate in a shared 24/7 on-call rotation.

Key Responsibilities

- Analyze and prioritize vulnerabilities from various sources, including Tenable, Microsoft Defender, CrowdStrike Falcon, Darktrace, GitHub Advanced Security, and application security testing tools.
- Track vulnerabilities from identification through closure, coordinating remediation efforts with infrastructure, cloud, application, and platform teams, and validating remediation evidence.
- Prioritize exposures based on exploitability, CVSS, EPSS, CISA KEV, threat intelligence, asset criticality, and attack paths.
- Investigate security alerts and suspicious activities across endpoint, network, identity, and cloud environments, supporting incident triage, containment, and escalation processes.
- Conduct threat hunting using endpoint detection, network monitoring, cloud security, and SIEM data, including investigations into emerging AI-enabled threats.
- Support application security activities such as SAST, DAST, SCA, code review findings, and security testing within CI/CD pipelines.
- Reconcile asset and scan data across security tools and ServiceNow CMDB, identify coverage gaps, and support continuous external attack surface monitoring.
- Troubleshoot security tool integrations, support vulnerability aggregation platforms like Vulcan, and contribute to automation, scripting, dashboards, and reporting.
- Participate in security testing, purple-team exercises, tool evaluations, and AI-assisted security initiatives.
- Maintain accurate incident records, handover documentation, remediation trackers, and reporting inputs to support security governance.
- Participate in a shared 24/7 on-call rota, respond to escalations within agreed timelines, and coordinate with SOC/MXDR providers and internal security teams.

Required Qualifications

- 3 to 5 years of experience in security operations, vulnerability management, or cybersecurity engineering within an enterprise setting.
- Hands-on experience with vulnerability management and security tools such as Tenable, CrowdStrike Falcon, Darktrace, Microsoft Defender, and GitHub Advanced Security; familiarity with Vulcan or similar platforms is preferred.
- Strong understanding of vulnerability assessment and risk-based prioritization, including CVSS, EPSS, CISA KEV, threat intelligence, and remediation tracking.
- Experience in incident response, security alert triage, and threat hunting across endpoint, network, identity, and cloud environments.
- Working knowledge of Windows, Linux, Azure, networking, enterprise infrastructure, SSDLC, CI/CD, and application security testing methodologies (SAST, DAST, SCA).
- Experience with ServiceNow or Jira for ticket management, data querying using KQL or SQL, and reporting tools such as Excel or Power BI.
- Awareness of emerging cybersecurity threats, including AI-assisted vulnerability discovery, AI-enabled ransomware, and agentic AI abuse.
- Strong analytical, troubleshooting, communication, and stakeholder coordination skills, with the ability to adapt to changing priorities and participate in an on-call rotation.

Preferred Qualifications and Benefits

- Experience in financial services or insurance sectors.
- Skills in penetration testing, red/purple teaming, and AI security testing.
- Knowledge of CMDB and asset management.
- Scripting experience using Python or PowerShell.
- Relevant certifications such as Security+, CySA+, GCIH, OSCP, or vendor-specific security certifications.

This role offers the opportunity to work in a dynamic, global enterprise environment, contributing to advanced security operations and innovative AI-assisted initiatives.