Senior Cyber Analyst

Methods; Deutschland; Hybrid; EUR 95.000 - 130.000; Vollzeit

Benefits dieser Stelle

Autonomy to develop skills

Exciting project work

Strong leadership

Collaborative environment

LinkedIn Learning access

Employee assistance program

Flexible working

Zusammenfassung

Methods is seeking a Senior Cyber Analyst to lead complex cyber investigations, incident response, and threat management within the Cyber Services function. The role provides technical leadership, mentoring, and strategic direction to ensure customers maintain a strong and resilient security posture across endpoints, networks, cloud, and identity platforms.

You will own detection rule development, automation, and response playbooks for Microsoft Sentinel, Defender, SIEM, SOAR, EDR, and XDR

Qualifikationen

• Significant experience in senior Cyber Security, SOC, Threat Detection, or Incident Response.
• Strong hands-on experience investigating and responding to complex cybersecurity incidents.
• Deep knowledge of Microsoft security technologies including Sentinel, Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft 365 Security, and Entra ID.
• Experience designing, tuning, and optimising SIEM, SOAR, EDR, and XDR solutions.

Aufgaben

• Lead investigations and resolution of complex cyber security incidents across endpoints, networks, cloud, and identity.
• Act as senior escalation point for threat hunting, incident response, and security investigations.
• Produce technical reports, post-incident reviews, threat intelligence briefings, and stakeholder communications.
• Collaborate with Service Delivery, Support, Projects, and Product teams to address security risks.
• Mentor Cyber Services team and ensure quality assurance.
• Translate cyber risk findings into business outcomes and recommendations.

Kenntnisse

Threat hunting

Incident response

Forensic analysis

Security tooling

Threat intelligence

Tools

Microsoft Sentinel

Microsoft Defender

SIEM

SOAR

EDR

XDR

Jobbeschreibung

The Senior Cyber Analyst is the senior technical lead within the Cyber Services function, responsible for complex cyber investigations, incident response, threat detection, and security platform optimisation. Acting as the highest technical escalation point within cyber operations, the role provides leadership, mentoring, and strategic direction to ensure customers maintain a strong and resilient security posture.

Incident Response & Threat Management

• Lead the investigation and resolution of complex cyber security incidents across endpoint, network, cloud, and identity platforms.
• Act as the senior escalation point for threat hunting, incident response, and security investigations.
• Conduct forensic analysis, identify attack patterns, and provide recommendations to reduce risk and improve resilience.

Security Platforms & Service Improvement

• Own the technical effectiveness and continual improvement of Microsoft Sentinel, Microsoft Defender, SIEM, SOAR, EDR, and XDR capabilities.
• Develop and maintain detection rules, use cases, automation, and response playbooks to improve operational efficiency.
• Work with the Technical Architect to align security tooling, controls, and services with customer and organisational requirements.

Technical Leadership & Governance

• Provide technical leadership, mentoring, and quality assurance across the Cyber Services team.
• Support security governance and compliance activities including ISO27001, Cyber Essentials Plus, and customer assurance requirements.
• Produce technical reports, post-incident reviews, threat intelligence briefings, and stakeholder communications.
• Collaborate with Service Delivery, Support, Projects, and Product teams to identify and address security risks and service improvements.
  Significant experience in a senior Cyber Security, SOC, Threat Detection, or Incident Response role.
• Strong hands‑on experience investigating and responding to complex cyber security incidents.
• Deep technical knowledge of Microsoft security technologies including Sentinel, Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft 365 Security, and Entra ID.
• Experience designing, tuning, and optimising SIEM, SOAR, EDR, and XDR solutions.
• Strong understanding of threat hunting, attack techniques, threat intelligence, and vulnerability management.
• Ability to translate technical findings and cyber risk into clear business outcomes and recommendations.
• Experience mentoring technical teams and driving operational standards.
• Excellent documentation, analytical, and stakeholder management skills.

Desirable

• Certifications such as SC-200, SC-300, CISSP, GCIH, GCIA, or equivalent.
• Knowledge of MITRE ATT&CK, NIST Cyber Security Framework, and Zero Trust principles.
• Experience with PowerShell, Python, or security automation technologies.
• Experience contributing to cyber service development, tooling strategy, or architectural design.
• Background in regulated or security-sensitive environments, including public sector, healthcare, local government, or financial services.

This role will require you to have or be willing to go through Security Clearance. As part of the onboarding process candidates will be asked to complete a Baseline Personnel Security Standard; details of the evidence required to apply may be found on the government website Gov.UK. If you are unable to meet this and any associated criteria, then your employment may be delayed, or rejected. Details of this will be discussed with you at interview.

Methods is passionate about its people; we want our colleagues to develop the things they are good at and enjoy.

Since our establishment in 1990, Methods has partnered with a range of central government departments and agencies to transform the way the public sector operates in the UK. Our mission is to improve and safeguard public-facing services. We apply digital thinking to ensure the future of our public services is centered around our citizens. Our human touch sets us apart from other consultancies, system integrators and software houses - we have a customer-centric value system whereby we focus on delivering what is right for our clients. We passionately support our clients in the success of their projects while working collaboratively to share skill sets and solve problems. At Methods we have fun while working hard; we are not afraid of making mistakes and learning from them. Methods are experts in delivering secure, resilient cyber and information services - keeping systems and data safe. We help reduce risk and vulnerabilities from cyber-attacks by developing a security road-map tailored to your unique needs. We help organisations improve processes such as threat management by building an identity management programme, and establishing prevention, detection and response capabilities to cyber-attacks.

Benefits

• Autonomy to develop and grow your skills and experience
• Be part of exciting project work that is making a difference in society
• Strong, inspiring and thought-provoking leadership
• A supportive and collaborative environment
• Development - access to LinkedIn Learning, a management development programme, and training
• Wellness - 24/7 confidential employee assistance programme
• Flexible Working - including home working and part time
• Social - office parties, breakfast Tuesdays, monthly pizza Thursdays, Thirsty Thursdays, and commitment to charitable causes
• Time Off - 25 days of annual leave a year, plus bank holidays, with the option to buy 10 extra days each year
• Volunteering - 2 paid days per year to volunteer in our local communities or within a charity organisation