Senior Cyber Analyst
About this role
Since our establishment in 1990, Methods has partnered with a range of central government departments and agencies to transform the way the public sector operates in the UK.Our mission is to improve and safeguard public-facing services. We apply digital thinking to ensure the future of our public services is centered around our citizens.Our human touch sets us apart from other consultancies, system integrators and software houses - we have a customer-centric value system whereby we focus on delivering what is right for our clients.We passionately support our clients in the success of their projects while working collaboratively to share skill sets and solve problems. At Methods we have fun while working hard; we are not afraid of making mistakes and learning from them.Methods are experts in delivering secure, resilient cyber and information services – keeping systems and data safe. We help reduce risk and vulnerabilities from cyber-attacks by developing a security road-map tailored to your unique needs. We help organisations improve processes such as threat management by building an identity management programme, and establishing prevention, detection and response capabilities to cyber-attacks. Role SummaryThe Senior Cyber Analyst is the senior technical lead within the Cyber Services function, responsible for complex cyber investigations, incident response, threat detection, and security platform optimisation. Acting as the highest technical escalation point within cyber operations, the role provides leadership, mentoring, and strategic direction to ensure customers maintain a strong and resilient security posture. Incident Response & Threat ManagementLead the investigation and resolution of complex cyber security incidents across endpoint, network, cloud, and identity platforms.Act as the senior escalation point for threat hunting, incident response, and security investigations.Conduct forensic analysis, identify attack patterns, and provide recommendations to reduce risk and improve resilience.Security Platforms & Service ImprovementOwn the technical effectiveness and continual improvement of Microsoft Sentinel, Microsoft Defender, SIEM, SOAR, EDR, and XDR capabilities.Develop and maintain detection rules, use cases, automation, and response playbooks to improve operational efficiency.Work with the Technical Architect to align security tooling, controls, and services with customer and organisational requirements.Technical Leadership & GovernanceProvide technical leadership, mentoring, and quality assurance across the Cyber Services team.Support security governance and compliance activities including ISO27001, Cyber Essentials Plus, and customer assurance requirements.Produce technical reports, post-incident reviews, threat intelligence briefings, and stakeholder communications.Collaborate with Service Delivery, Support, Projects, and Product teams to identify and address security risks and service improvements. Skills & ExperienceEssentialSignificant experience in a senior Cyber Security, SOC, Threat Detection, or Incident Response role.Strong hands-on experience investigating and responding to complex cyber security incidents.Deep technical knowledge of Microsoft security technologies including Sentinel, Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft 365 Security, and Entra ID.Experience designing, tuning, and optimising SIEM, SOAR, EDR, and XDR solutions.Strong understanding of threat hunting, attack techniques, threat intelligence, and vulnerability management.Ability to translate technical findings and cyber risk into clear business outcomes and recommendations.Experience mentoring technical teams and driving operational standards.Excellent documentation, analytical, and stakeholder management skills.DesirableCertifications such as SC-200, SC-300, CISSP, GCIH, GCIA, or equivalent.Knowledge of MITRE ATT&CK, NIST Cyber Security Framework, and Zero Trust principles.Experience with PowerShell, Python, or security automation technologies.Experience contributing to cyber service development, tooling strategy, or architectural design.Background in regulated or security-sensitive environments, including public sector, healthcare, local government, or financial services. This role will require you to have or be willing to go through Security Clearance. As part of the onboarding process candidates will be asked to complete a Baseline Personnel Security Standard; details of the evidence required to apply may be found on the government website Gov.UK. If you are unable to meet this and any associated criteria, then your employment may be delayed, or rejected .
What this role is, and what else it is called
Employers in London advertise this kind of work as Security Engineer, IT Security Analyst, Cyber Security Consultant and Junior Penetration Test Engineer too, so it is worth searching more than one wording. It is a senior Cybersecurity role in London, advertised without a stated working pattern, which is worth asking about.
About hiring at Methodsdigital
Methodsdigital appears alongside 5 other live technology roles on this source domain, across Software Engineering and Cybersecurity. Elsewhere in its adverts Methodsdigital asks for Observability, TypeScript, AWS and Serverless. See all Methodsdigital roles, salaries and stack.
How this role compares to the market
London has 1,426 live IT vacancies across 727 source domains, with a median annual salary midpoint of £55,000. Browse London roles.
Senior roles make up 982 of the live UK IT market and have a median annual salary midpoint of £60,000.
Market figures are today's snapshot of reportable live UK roles on public careers and vacancy pages; see hiring trends.
Detected on Methodsdigital's careers page. ProdReady Recruitment lists this vacancy as an aggregator and is not the employer; applications go to the employer's own site. More IT jobs in London.