> Markdown version of [/jobs/ext/2794938-senior-cyber-security-analyst](https://www.wearedevelopers.com/jobs/ext/2794938-senior-cyber-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Cyber Security Analyst - **Company:** Lightsource BP - **Location:** Greater London, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Authentication Protocols, Microsoft Azure, Cloud Computing Security, Configuration Management, Cyber Security, Data Governance, Database Queries, Intrusion Detection and Prevention, Intrusion Detection Systems, Information Systems Security Architecture Professional, Microsoft Security Essentials, Kusto Query Language, Security Information and Event Management, Software Vulnerability Management, Mitre Att&ck, Firewalls (Computer Science), Microsoft InTune, Azure Security Center, Information Technology, Cybercrime, Nessus, Microsoft Sentinel, Operational Systems, Fortinet, Vulnerability Analysis - **Published:** September 8, 2026 - **Apply:** https://www.collegerecruiter.com/job/2840675788-senior-cyber-security-analyst ## About the Role 5+ years of professional experience in cybersecurity, with at least 2+ years in a Security OperationsCenter(SOC) or incident response role Advancedproficiencywith Microsoft Defender XDR and expert-level knowledge of Microsoft Sentinel, including KQL query writing and analytics rule development Strong hands-on experience with Microsoft Defender for Endpoint, including policy configuration and threat investigation Demonstrable experience responding to cyber threats and working in an Azure-focused cloud environment Proven experience with the Cyber Kill Chain, MITRE ATT&CK, and other securitydefenceand intelligence frameworks Experience in stakeholder management and engagement at C-Suite level Experience working for Critical National Infrastructure (CNI) organizations is desirable Knowledge: Vulnerability Management:Defender XDR, Tenable IO/Nessus, Defender EASM Data Governance & IDAM:Microsoft Purview (DLP and information governance), Entra ID, Conditional Access Policies Device Management:Working understanding of Intune (MDM/MAM) Networking/Firewalls:Exposure to Cisco Meraki and Fortinet FortiGate (desirable) Regulatory & Compliance Frameworks:NIST 2.0 Cyber Security Framework (required); NIS2, NERC CIP, SOC2, and IEC 62443 OT standards (desirable) ITIL Principles:Good understanding of ITIL principles and their application to IT service management Information Security Technologies:Firewalls, intrusion detection systems, vulnerability assessment tools, logging solutions, gateway and endpoint security products, and authentication mechanisms, Advanced threat detection, investigation, and incident response capabilities Strong technical troubleshooting and problem-solving skills with ability to work across complex, global technology environments Expert-levelproficiencywith Microsoft security tools and cloud-based security architectures Excellent communication skills: ability to translate complex technical concepts for both technical and non-technical audiences Proactive mindset with genuine enthusiasm for cybersecurity and drive to improve security posture Ability to remain calm under pressure and manage multiple incidents and priorities Cross-functional collaboration: ability to partner effectively with Infrastructure, Digital Workplace, Support, and business teams worldwide Strong documentation and reporting skills for both technical and executive audiences Subject matterexpertisewith proven ability toidentifyand champion security improvement opportunities, Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field Industry-recognized certification (one or more of the following): Azure Security Engineer (AZ-500) Certified Information Systems Security Professional (CISSP) Certified Cyber Professional (CCP) CompTIA Security+ GIAC Certified Incident Handler (GCIH) GIAC Certified Intrusion Analyst (GCIA) ## Description We areseekinga dynamic, hands-onSenior Cybersecurity Analysttomonitorcyber risk and lead the remediation ofidentifiedvulnerabilities across Lightsource bp's IT systems globally. You willbe responsible forthreat detection, investigation, and incident response,leveraginga modern security technology stack with a strong focus on the Microsoft Defender ecosystem. Working across multiple business areas and time zones, you will proactively hunt for security issues, assess emerging threats, and partner with infrastructure and support teams to strengthen our security posture and drive business cyber maturity., Continuouslymonitorthe organization's security systems and infrastructure using SIEM, EDR, and related toolsets to detect signs of compromise and investigate security events to completion Proactively conduct threat hunting using threat intelligence frameworks (MITRE ATT&CK, Cyber Kill Chain) and available security platforms toidentifyand mitigate emerging threats Assess new and evolving cyber threats to the business,optimizingexisting Microsoft Defender technologies and other security solutions to better counteridentifiedrisks Identifyvulnerabilities in systems and applications; collaborate with Infrastructure, Digital Workplace, and Support teams to prioritize, patch, and remediate issuesin a timely manner Manage core Security Operations (SecOps) tooling platforms, ensuring correct configuration, maximizing security value from existing investments, andmaintaininghigh-quality configuration documentation Communicate proactively with stakeholders across the business, providing clear technical and non-technical updates during investigations and escalations Support the development, enforcement, and continuous improvement of cloud security policies, standards, and procedures in alignment with industry frameworks (NIST 2.0, CIS, NIS2) and regulations Create andmaintainsecurity awareness training content andassistin its delivery to colleagues across the organization, You will work within a small, talented cybersecurity team and collaborate with a global IT organization The role requires engagement with the convergence of IT and Operational Technology (OT) security, reflecting the evolving landscape of energy infrastructure protection International regulatory compliance knowledge will be increasingly important as the organization scales across multiplejurisdiction, Our culture is driven by our core values - fromoperatingsafely to ensuring our projects are responsible. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [WeAreDevelopers LIVE - Back to CODE100](https://www.wearedevelopers.com/videos/1909-wearedevelopers-live-back-to-code100) - [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)