Cyber Security Analyst

About the role

The Cyber Security Analyst will continuously monitor and triage security events from SIEM and other tools across client environments, investigate incidents, and implement containment actions. The role also involves tuning platforms, developing detection playbooks, and introducing new tooling such as AI to improve SOC efficiency.

Key responsibilities

• Respond to and triage alerts quickly to reduce Mean Time to Respond (MTTR).
• Monitor customer environments proactively to improve detection speed and client confidence.
• Tune and build alerting rules to minimise false positives and enhance accuracy.
• Create clear documentation and playbooks to accelerate response workflows.
• Automate repetitive alert handling and implement AI/ML solutions to lower detection and response times.

Required profile

• Strong analytical and problem‑solving skills.
• Excellent communication ability to convey technical concepts to both technical and non‑technical stakeholders.
• Knowledge of threat actor behaviour, attack lifecycle and networking, infrastructure, and operating systems.
• Highly organised, proactive and able to prioritise under pressure.

Required skills

• Experience with SIEM platforms.
• Proficiency in scripting languages such as Python, Bash or PowerShell.
• Familiarity with AI/ML and generative AI or large language models for security automation.