{"id":3703156,"url":"https://alion.io/job/ao-shearman-cyber-defence-analyst","title":"Cyber Defence Analyst","company":{"id":1762255,"name":"A&O Shearman","domain":"aoshearman.com","url":"https://alion.io/company/aoshearman","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Schema","truth_index":{"grade":"B","score":71,"open_postings":186,"ghost_share":0.489,"stale_share":0,"repost_share":0.005,"time_to_fill_p50_days":32,"computed_at":"2026-11-05T05:54:30Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Belfast, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":1,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false}],"status":"live","first_seen_at":"2026-11-03T20:16:11Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-05T06:22:19Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":1},"description":"We have an exciting opportunity for Cyber Defence Analysts to join our global Information Security team, based in the A&O Shearman’s Belfast office.This is a hands-on role for someone looking to build their career in Cyber Defence, working with a global team to investigate security alerts, respond to cyber incidents and help protect an international organisation from evolving cyber threats. You’ll gain exposure across a broad range of Cyber Defence activities while continuing to develop your technical expertise in areas such as incident response, threat detection, security tooling, and process improvement.\nPlease note that weekend working is a requirement for this role, with exact shift patterns discussed at interview. All weekend hours are eligible for a premium payment in addition to base salary.\nWhat you will do\nInvestigate escalations\nInvestigate and prioritise escalated cyber security events and alerts, identifying potential incidents and escalating where appropriate.\nInvestigate potential cyber security and data loss incidents raised by employees or third parties, following established Cyber Defence playbooks.\nRespond to information security queries, working with colleagues across the team to provide appropriate guidance.\nIncident ResponseSupport incident response activities, including the initial triage, investigation, containment, mitigation and remediation of confirmed incidents.\nGather and document relevant forensic evidence to support investigations.\nParticipate in security incident response exercises and contribute to post-incident and post-exercise reviews.\nWork with Cyber Defence teams across different time zones as part of our 24/7 follow-the-sun global model, ensuring effective handover of ongoing incidents.\nMaintain awareness of emerging cyber threats, techniques and procedures, applying threat intelligence insights to day-to-day investigations.\nParticipate in the Cyber Defence on-call rota, including out-of-hours support where required.\nTooling and Process ImprovementSupport the implementation, enhancement and effective use of Cyber Defence tools and technologies.\nHelp continuously improve Cyber Defence processes, playbooks and documentation.\nIdentify opportunities to improve detection, investigation and response capabilities across the team.\nCollaboration and AdvisoryWork closely with Information Security, IT and other teams to strengthen the firm’s overall security posture.\nProvide practical Cyber Defence guidance to stakeholders, translating complex technical issues into clear, business-friendly language.\nWhat you will have\n1+ years’ experience in Security Operations, Cyber Defence, a SOC, or a similar technical security environment.\nPractical experience across at least two areas such as alert triage, incident response, security engineering, detection/rule writing, DFIR, threat intelligence, vulnerability management or security control testing.\nWorking knowledge of key Cyber Defence technologies, including SIEM, IDS/IPS, endpoint protection/EDR, firewalls and threat or vulnerability management tooling.\nStrong networking fundamentals, particularly TCP/IP, DNS and SMTP.\nAn analytical and investigative mindset, with the ability to assess alerts and data, identify potential security incidents and determine appropriate next steps.\nStrong communication skills and the ability to explain technical cyber security issues clearly to different audiences.\nYou will stand out if you haveDigital Forensics & Incident Response (DFIR), including relevant incident response or forensic training/certification.\nPenetration testing or web application security/testing.\nScripting or automation using Python and/or PowerShell.\nSecurity experience across Azure, AWS or GCP.\nRelevant cyber security qualifications or certifications, such as CompTIA Security+, CEH, CISSP or CISM.\nNO AGENCIES PLEASE - A&O Shearman does not accept unsolicited CVs. For further information, please see our UK Recruitment Agency Policy and our commitment to direct sourcing here.\n#LI","description_format":"text","description_chars":4022,"description_truncated":false,"requirements":{"experience_years_min":1,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Legal Services"],"lifecycle":[{"event":"open","at":"2026-11-03T20:16:11Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":32,"reasons":["conf:5","velocity","win:early","comp:junior,brand"],"computed_at":"2026-11-05T05:54:30Z"},"pay":null,"html_url":"https://alion.io/job/ao-shearman-cyber-defence-analyst","json_url":"https://alion.io/job/ao-shearman-cyber-defence-analyst.json","meta":{"generated_at":"2026-11-05T06:42:21Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8314,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1762255},"rest":"https://alion.io/mcp/rest/get_company?id=1762255"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fao-shearman-cyber-defence-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fao-shearman-cyber-defence-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fao-shearman-cyber-defence-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ao-shearman-cyber-defence-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fao-shearman-cyber-defence-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3703156}},{"tool":"search_jobs","arguments":{"company":"aoshearman.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3703156},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}