Cybersecurity Analyst - SOC Lead, XDR & Threat Hunting

Hayfin Capital Management; Greater London; Sur place; GBP 60 000 - 90 000; Plein temps

Résumé du poste

Hayfin Capital Management is seeking a hands-on Cybersecurity Analyst to own day-to-day security operations of a Microsoft-native estate and coordinate with internal teams and an external SOC partner.

You will lead incidents from escalation to root-cause analysis, tune detections, and drive improvement across Entra ID, Intune, Defender for Endpoint and Azure, while delivering ISO 27001, FCA and DORA evidence and metrics.

Qualifications

• 3 years hands-on experience in a SOC, security operations or security engineering role.
• Experience with Defender XDR, Sentinel, Entra ID and Intune.
• Demonstrable incident response experience.
• Experience working with or alongside a managed SOC or MSSP.
• Clear, concise written communication, from incident reports to management-ready metrics.

Responsabilités

• Acting as first point of escalation from the managed SOC, leading investigation, containment and root-cause analysis for Defender XDR and Sentinel incidents
• Developing and tuning detections and KQL queries, and running threat hunts mapped to MITRE ATT&CK
• Hardening our Microsoft environment across Entra ID, Intune, Defender for Endpoint and Azure, and owning the vulnerability management lifecycle
• Administering our email, web and data security controls, and running the phishing simulation and awareness programme
• Producing audit evidence and monthly security metrics for ISO 27001, FCA and DORA obligations, and supporting due diligence on vendors and portfolio companies
• Holding the managed SOC to account and contributing to the security roadmap
• You have built your career in security operations or security engineering, and you are ready to take on more ownership.

Connaissances

Defender XDR

Sentinel

Entra ID

Intune

Incident response

MITRE ATT&CK

KQL

PowerShell

Python

Automation scripting

Threat hunting

Description du poste

Hayfin Capital Management is seeking a hands-on Cybersecurity Analyst to own day-to-day security operations of a Microsoft-native estate and coordinate with internal teams and an external SOC partner.

You will lead incidents from escalation to root-cause analysis, tune detections, and drive improvement across Entra ID, Intune, Defender for Endpoint and Azure, while delivering ISO 27001, FCA and DORA evidence and metrics.