Cybersecurity Analyst, Cloud Security & Incident Response

Hayfin Capital Management LLP; Greater London; On-site; GBP 60,000 - 90,000; Full time

Job summary

Hayfin Capital Management LLP is seeking a hands-on Cybersecurity Analyst to own the day-to-day security operations of a Microsoft-native estate and act as a bridge to our SOC partner. You will lead incidents from escalation to root-cause review and tune detections across Defender XDR and Sentinel.

You will harden the Microsoft environment, manage vulnerability lifecycle, and produce ISO 27001/FCA/DORA evidence.

Qualifications

• 3 years’ hands-on experience in a SOC, security operations or security engineering role.
• Strong practical experience with Defender XDR, Sentinel, Entra ID and Intune.
• Demonstrable incident response experience.
• Experience working with or alongside a managed SOC or MSSP.
• Clear, concise written communication, from incident reports to management-ready metrics.

Responsibilities

• Acting as first point of escalation from the managed SOC, leading investigation, containment and root-cause analysis for Defender XDR and Sentinel incidents.
• Developing and tuning detections and KQL queries, and running threat hunts mapped to MITRE ATT&CK.
• Hardening our Microsoft environment across Entra ID, Intune, Defender for Endpoint and Azure, and owning the vulnerability management lifecycle.
• Administering our email, web and data security controls, and running the phishing simulation and awareness programme.
• Producing audit evidence and monthly security metrics for ISO 27001, FCA and DORA obligations, and supporting due diligence on vendors and portfolio companies.
• Holding the managed SOC to account and contributing to the security roadmap.

Skills

SOC experience

Incident response

Defender XDR

Sentinel

Entra ID

Intune

MITRE ATT&CK

KQL

Scripting (PowerShell/Python)

Automation

Tools

Defender XDR

Sentinel

Entra ID

Intune

Mimecast

Egress

Zscaler

PowerShell

Python

Job description

Hayfin Capital Management LLP is seeking a hands-on Cybersecurity Analyst to own the day-to-day security operations of a Microsoft-native estate and act as a bridge to our SOC partner. You will lead incidents from escalation to root-cause review and tune detections across Defender XDR and Sentinel.

You will harden the Microsoft environment, manage vulnerability lifecycle, and produce ISO 27001/FCA/DORA evidence.