Senior Cyber Security Operations Analyst

We are seeking an experienced Senior Cyber Security Operations Analyst to join our team. The ideal candidate will have a strong background in cloud security, incident response, and vulnerability management. Working with greater independence than an analyst, you will take ownership of complex investigations, drive improvements to security processes, and support the development of those around you — without being a team lead.

Key Responsibilities:

Incident Response:

• Own and lead complex incident response investigations end-to-end, from detection through to post-incident review, without direct supervision.
• Investigate security breaches and provide detailed reports on findings and recommendations.
• Coordinate with IT teams to ensure timely resolution of security incidents, acting as a point of escalation for complex or ambiguous events.
• Participate in and help plan regular Audits, Tabletops, and Purple Team exercises; share lessons learned with the team.
• Perform alert triage and severity assessment on incoming security alerts from multiple sources.
• Investigate phishing incidents including email header analysis, sender verification, and payload identification; coordinate remediation.
• Conduct data exfiltration investigations: scope of compromise, affected data identification, business impact assessment, and containment coordination.
• Perform endpoint forensics including process analysis, malware identification, timeline reconstruction, and evidence collection.
• Document findings with detailed incident timelines and evidence preservation for audit compliance.
• Execute containment actions and coordinate with IT teams.
• Participate in the Cyber Security on-call rota, providing out-of-hours support for security incidents, critical alerts, and escalations.

General Responsibilities:

• Stay up-to-date with the latest security trends, threats, and technologies; proactively share insights with the team.
• Provide technical advice and support to other departments on security-related matters.
• Mentor and support junior analysts, sharing knowledge and helping them grow.
• Identify gaps in security processes and take ownership of improving them.
• Conduct training sessions to educate staff on security best practices.
• Prepare and deliver comprehensive reports on security assessments and incident responses.
• Manage and maintain security tooling and infrastructure e.g. Defender XDR, DLP, security configuration management tools.
• Coordinate with internal teams and external parties to resolve incidents and track remediation.

Cloud Security:

• Evaluate and implement cloud security solutions to protect against breaches and data loss.
• Lead risk assessments and security audits for cloud environments; own the output and follow-through.
• Develop and maintain cloud security policies and procedures, identifying gaps and driving resolution.

Beneficial Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• 5+ years of experience in cybersecurity, with a focus on cloud security, incident response, and vulnerability management.
• Relevant certifications such as CompTIA Security+, Blue Team Level 1 (BTL1), GIAC Certified Incident Handler (GCIH) or GIAC Security Operations Certified (GSOC).
• Strong understanding of cybersecurity frameworks, standards and regulations (e.g., NIST, ISO 27001, Cyber Essentials, GDPR).

Preferred Skills:

• Experience with cloud platforms such as Azure, AWS and various SaaS products.
• Knowledge of scripting languages (e.g., Python, PowerShell) for automation.
• Experience with security tools such as SIEM, IDS/IPS, and vulnerability scanners; able to develop and tune detection rules independently.
• Excellent problem-solving skills and attention to detail; targets results, accepts accountability, and pushes through obstacles.
• Hands-on experience with Defender Endpoint and endpoint detection and response (EDR) tools.
• Experience with endpoint management and remediation tools.
• Malware analysis basics: identifying malware families, extracting IOCs, and correlating with threat intelligence.
• Log analysis and SIEM query experience to investigate security events.
• Ability to work under pressure, escalate appropriately, and communicate clearly during incidents.
• Strong communication skills, both written and verbal; able to influence and build buy-in across teams without relying on authority.
• Demonstrates initiative: tackles problems independently, generates ideas, and challenges the status quo to make things better.
• Proactive self-developer: seeks out feedback, keeps skills current, and turns learning opportunities into practice.
• Leads by example in living company values — quality-focused, collaborative, and committed to continuous improvement.

Why Version 1?

At Version 1, we believe in providing our employees with a comprehensive benefits package that prioritises their wellbeing, professional growth, and financial stability.

• Share in our success with our Quarterly Performance-Related Profit Share Scheme, where employees collectively benefit from a share of our company's profits

• Strong Career Progression & mentorship coaching through our Strength in Balance & Leadership schemes with a dedicated quarterly Pathways Career Development programme

• Flexible/remote working, Version 1 is tremendously understanding of life events and people’s individual circumstances and offer flexibility to help achieve a healthy work life balance

• Financial Wellbeing initiatives including; Pension, Private Healthcare Cover, Life Assurance, Financial advice and an Employee Discount scheme

• Employee Wellbeing schemes including Gym Discounts, Bike to Work, Fitness classes, Mindfulness Workshops, Employee Assistance Programme and much more. Generous holiday allowance, enhanced maternity/paternity leave, marriage/civil partnership leave and special leave policies

• Educational assistance, incentivised certifications, and accreditations, including AWS, Microsoft, Oracle, and Red Hat

• Reward schemes including Version 1’s Annual Excellence Awards & ‘Call-Out’ platform.

• Environment, Social and Community First initiatives allow you to get involved in local fundraising and development opportunities as part of fostering our diversity, inclusion and belonging schemes.

And many more exciting benefits… drop us a note to find out more.

Version 1 is an equal opportunities employer.

We are committed to building a diverse, inclusive and respectful workplace where everyone feels valued and able to thrive. We welcome applications from people of all backgrounds, identities and lived experiences, and we value the different perspectives people bring including those shaped by disability and neurodiversity.

We want every candidate to have a positive and accessible recruitment experience. If you need reasonable adjustments at any stage of the process, please contact your recruiter at Version 1. We will consider all requests carefully, respectfully and confidentially.

Video links: