Senior Cyber Security Analyst

About the role

Reporting to the Head of Information Technology, the Senior Cyber Security Analyst will play a critical role in protecting LLL's information assets and strengthening the resilience of its technology environment. This hands‑on senior position is responsible for supporting and enhancing cyber security capabilities across security operations, vulnerability management, incident response, security monitoring and operational resilience.

Key responsibilities

• Monitor, investigate and respond to security alerts, incidents and emerging cyber threats.
• Lead vulnerability management activities, including prioritisation, remediation tracking and validation testing.
• Administer and enhance security technologies including SIEM, EDR/MDR, identity protection, Microsoft security platforms and vulnerability management tools.
• Coordinate threat hunting, vulnerability assessments and penetration testing activities, ensuring findings are effectively remediated.
• Assess, monitor and improve LLL's cyber security maturity, supporting the development of security controls, compliance obligations and organisational resilience.
• Support business continuity, disaster recovery and cyber incident response planning, testing and recovery activities.
• Partner with internal teams and external service providers to embed security best practices across technology solutions and projects.
• Develop and deliver cyber security awareness initiatives, training programs and educational activities to strengthen organisational capability and security culture.
• Prepare dashboards, metrics and reports that provide visibility of cyber security performance, threats and remediation activities.

Required profile

• Strong hands‑on experience with security technologies including SIEM, EDR/MDR, endpoint protection, vulnerability management, identity security platforms and Microsoft security technologies such as Entra ID, Conditional Access, MFA, Privileged Identity Management, Microsoft Defender, DLP and Purview.
• Experience investigating security incidents, analysing threats and coordinating remediation activities.
• Sound knowledge of contemporary cyber security practices across cloud, infrastructure, endpoint and identity environments.
• Strong understanding of information security control management, including design, implementation, testing, effectiveness assessment, remediation tracking and assurance.
• Strong analytical and problem‑solving skills with ability to assess complex technical issues and provide practical solutions.
• Excellent communication and stakeholder engagement skills, able to work across technical and non‑technical teams.
• Experience designing and delivering security awareness, training or cyber education programs (highly regarded).
• Tertiary qualifications in Cyber Security, IT, Computer Science or related discipline, with relevant certifications such as CISSP, CCSP, CISM, Microsoft Security (desirable).

Required skills

• SIEM
• EDR
• MDR
• Endpoint protection
• Vulnerability management
• Identity security platforms
• Microsoft Entra ID
• Conditional Access
• Multi‑Factor Authentication (MFA)
• Privileged Identity Management (PIM)
• Microsoft Defender
• Data Loss Prevention (DLP)
• Microsoft Purview
• Threat hunting
• Penetration testing
• Security monitoring
• Incident response

What we offer

• Purposeful and connected culture
• Diverse and inclusive workplace
• Flexible working arrangements
• Professional development in a growth environment
• Competitive salary and benefits, including free on‑site parking