Senior Security Operations Analyst

We’re looking for a Senior Security Operations Analyst to join our Technology team and play a key role in protecting our environment from evolving cyber threats.

This is a hands-on role with a strong focus on vulnerability management, working across technology and application teams to identify security weaknesses, understand the real-world risk they present, and drive remediation through to completion.

You’ll work with security platforms including Qualys, Microsoft Defender, GitHub Advanced Security and Snyk, using data and threat context to ensure we focus our efforts where they matter most.

Day to day you will:

• Own day-to-day vulnerability management, from identification and assessment through to remediation.
• Analyse and correlate findings across tools including Qualys, Microsoft Defender, GitHub Advanced Security and Snyk.
• Prioritise vulnerabilities based on severity, exploitability, internet exposure, attack paths and business criticality.
• Partner with infrastructure, application and platform teams to establish clear remediation ownership and timeframes.
• Create and manage remediation tickets, track progress and follow up on overdue or high-risk vulnerabilities.
• Monitor remediation against agreed vulnerability SLAs and escalate exceptions or emerging risks.
• Help maintain accurate asset ownership and criticality information to enable effective, risk-based prioritisation.
• Produce meaningful reporting across security exposure, remediation performance, vulnerability ageing, backlog and emerging trends.
• Support security governance, audit and risk activities by providing clear evidence, metrics and remediation updates.
• Look for opportunities to improve vulnerability management processes through automation and smarter ways of working.
• Contribute across the wider Security Operations function, including vulnerability triage, threat-driven investigations and security incident support.

About you:

• Similar experience in cyber security, vulnerability management, Security Operations or a related technology security role.
• Hands-on experience with vulnerability scanning, SIEM, XDR or EDR security tools.
• Strong analytical skills with an understanding of vulnerability risk, exploitability, attack paths and prioritisation.
• Exposure to tools such as Microsoft Defender XDR, Microsoft Sentinel and/or frameworks such as MITRE ATT&CK.
• Strong communication and stakeholder skills, with the ability to turn security findings into clear actions and drive remediation through to completion.
• Experience with PowerShell, Python or security automation would be an advantage.
• Relevant certifications such as Security+, CySA+, SC-200 or CISSP would be beneficial.