Cyber Defense Analyst: Threat Detection & Incident Response

Bertelsmann

Greater London

On-site

GBP 65,000 - 90,000

Full time

14 days+

Application generator

Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.

Get past ATS filters

Job summary

Fremantle is seeking an experienced Cyber Security Operations professional to join a small global security team protecting a leading TV production company. You’ll manage threat detection, incident response, vulnerability management and help drive improvements across outsourced SOCs, security technologies, cloud platforms and network security tools.

The role involves hands-on governance, collaboration with vendors and internal teams to strengthen the company’s security posture and resilience

Qualifications

4–6 years in cyber security operations (SOC, tooling, incident response).
Hands-on experience with SIEM, EDR/XDR, CASB, firewalls, and vulnerability management tools.
Experience with Microsoft Entra ID (Azure AD), Conditional Access, and Defender Suite including Azure Security Centre.
Experience managing major incidents and coordinating with outsourced/3rd party SOC providers & other security technology providers.
Experience with SOAR workflow design & operations.
Practical experience in the management and operation of NAD, Secure Email Gateway & Secure Web Gateway.
Familiarity with Microsoft 365 security tools and service integration.
Understanding of LAN/WAN security principles, firewalls & related security technologies.
Strong understanding of ISO 27001, NIST, and hybrid/cloud security architectures.
Degree or equivalent qualifications and security certifications (CISSP, CISM, Security+, GIAC, CySA+).

Responsibilities

Contribute to developing a more resilient Cyber Security baseline at Fremantle.
Liaise with outsourced SOC to ensure response to security alerts and incidents.
Collaborate to operate and tune SIEM, EDR, Darktrace NAD, and cloud security platforms.
Track vulnerabilities and support global remediation efforts.
Assist in managing vendor SLAs and service reviews for security operations.
Maintain documentation and contribute to playbooks and reporting.
Support the Group Cyber Security Manager in delivering effective security services and improvements.