Senior Cyber Security Analyst
About this role
We help retailers lower operating costs, improve billing accuracy for consumers, and enhance customer experience through automation and AI‑driven insight, all underpinned by modern, cloud‑native architecture. ENSEK is at an exciting inflection point as we scale at pace towards new international horizons. If you’re driven by solving complex, real‑world problems and want to build modern technology that accelerates the global energy transition, you’ll feel right at home with us. About the roleAs a Senior Cyber Security Analyst, you'll act as a technical authority within Security Operations, owning the design, development and continuous improvement of our detection and response capabilities. You'll lead the response to major security incidents, drive threat-informed detection engineering, influence security architecture decisions, and work closely with colleagues across Security, Engineering and Platform teams to ensure ENSEK remains resilient against evolving threats. This role combines hands-on technical expertise with leadership responsibilities, offering the opportunity to mentor junior analysts while contributing to strategic security initiatives across the business. Key responsibilities: Lead Security Incident Response by managing high-severity security incidents end-to-end, coordinating containment and recovery activities, conducting post-incident reviews, and acting as the senior technical lead during P1/P2 events. Own Detection & Response Capability through the design, development and optimisation of SIEM detections, maintaining MITRE ATT&CK coverage, improving detection effectiveness, and identifying gaps across ENSEK's security monitoring landscape. Drive Threat-Informed Security Operations by partnering with Threat & Vulnerability teams to operationalise threat intelligence, support vulnerability management activities, and ensure security operations remain aligned to ENSEK's evolving threat profile. Enhance Security Automation & Operational Efficiency through the development of playbooks, automated response workflows, alert enrichment capabilities, and tool integrations that reduce analyst effort and improve response times. Provide Security Leadership & Assurance by acting as the primary escalation point for Security Operations, mentoring analysts, supporting threat modelling activities, and providing security input into architectural and engineering decisions. Deliver Security Reporting & Compliance Support by owning operational metrics and performance reporting, communicating risk to stakeholders, and contributing evidence and control monitoring activities supporting ISO 27001, SOC 2 and NIS2 compliance requirements. Key outcomes:Maintain an effective detection and response capability, continuously improving SIEM coverage, reducing false positives, and identifying gaps through MITRE ATT&CK aligned monitoring. Lead the successful resolution of security incidents, ensuring timely containment, clear stakeholder communication, thorough post-incident reviews, and implementation of lessons learned. Strengthen ENSEK's security posture by operationalising threat intelligence, supporting vulnerability remediation activities, and proactively identifying emerging risks. Improve operational efficiency through the development of security automation, response playbooks and workflow enhancements that reduce manual effort and accelerate investigation and response times. Increase security maturity across the organisation by providing security assurance to projects, supporting threat modelling activities, and embedding security monitoring requirements into new services and platforms. Contribute to a high-performing Security Operations function by mentoring analysts, delivering meaningful operational reporting, and supporting compliance obligations including ISO 27001, SOC 2 and NIS2. Experience required: Proven experience operating within a Security Operations, Cyber Security Analyst, Security Engineer or Incident Response role, with responsibility for leading complex security investigations and major incident response activities. Strong hands-on experience with SIEM platforms, including detection engineering, alert tuning, correlation rule development, coverage mapping, and the continuous improvement of monitoring capabilities. Demonstrable experience leading security incidents from initial triage through to containment, recovery and post-incident review, including stakeholder management during high-severity events. Practical experience applying the MITRE ATT&CK framework to detection engineering, threat hunting, investigations, threat modelling, or security control assessment. Experience developing or supporting security automation and orchestration workflows, including the creation of playbooks, automated response actions, and integrations between security tools. Experience working with cloud security technologies, endpoint detection and response (EDR/MDR) solutions, threat intelligence, and vulnerability management processes within a modern technology environment. Strong communication skills with the ability to translate technical security risks, threats and vulnerabilities into clear, business-focused recommendations for both technical and non-technical stakeholders. Experience mentoring, coaching or providing technical leadership to junior analysts, helping to develop team capability through knowledge sharing, documentation and continuous improvement initiatives.
What this role is, and what else it is called
Employers in London advertise this kind of work as Security Engineer, IT Security Analyst, Junior Penetration Test Engineer and Mid-Level Penetration Test Engineer too, so it is worth searching more than one wording. It is a senior Cybersecurity role in London, advertised as fully remote, so it is open to candidates working from home.
About hiring at ENSEK
ENSEK appears alongside 6 other live technology roles on this source domain, across DevOps, Platform & SRE, Software Engineering and IT Leadership & Management. Among 7 roles with a known arrangement, 100% are fully remote and 0% hybrid. Elsewhere in its adverts ENSEK asks for Observability, SQL, CI/CD, Terraform and Helm. See all ENSEK roles, salaries and stack.
How this role compares to the market
11 live UK roles list ISO 27001 right now, across 10 source domains. 67% of 3 roles with a known arrangement are remote. Browse ISO 27001 roles.
London has 1,430 live IT vacancies across 734 source domains, with a median annual salary midpoint of £55,000. Browse London roles.
Senior roles make up 1,010 of the live UK IT market and have a median annual salary midpoint of £57,500.
Market figures are today's snapshot of reportable live UK roles on public careers and vacancy pages; see hiring trends.
Technologies mentioned
Detected on ENSEK's careers page. ProdReady Recruitment lists this vacancy as an aggregator and is not the employer; applications go to the employer's own site. More IT jobs in London.