Hybrid Security Operations Analyst: Threat Detection & IR

Marcus Donald; City Of London; Hybrid; GBP 42,000 - 50,000; Full time

Job summary

Marcus Donald is seeking a Cyber Security Analyst (L1) to join a global security operations team in London. The role focuses on monitoring, threat detection, and incident response within a fast-paced enterprise environment.

This contract offers a 6-month term, hybrid work with two days per month in the London City office, and a day rate of £250 inside IR35. The successful candidate will work with SIEM tools, contribute to incident handling, and help improve security controls.

Qualifications

• Experience in cyber security, IT operations, or related field.
• Experience with security monitoring, incident response, or security operations.
• Familiarity with SIEM platforms such as Splunk or QRadar.
• Understanding of cyber security frameworks and threat detection methodologies.
• Knowledge of cloud environments (AWS, Azure, or GCP) desirable.
• Scripting skills in Python, PowerShell, or Bash advantageous.
• Strong analytical, communication, and problem-solving skills.

Responsibilities

• Monitor and investigate security alerts using SIEM and case management tools.
• Identify, analyse, and respond to potential cyber security threats and incidents.
• Escalate and support the management of security incidents in line with established procedures.
• Document investigations, findings, and remediation activities.
• Collaborate with security, IT, and business teams to resolve issues and improve security controls.
• Support continuous improvement initiatives, including automation and process enhancements.
• Contribute to reporting, documentation, and operational security activities.

Skills

SIEM experience

Threat detection

Incident response

Cloud platforms

Scripting basics

Analytical skills

Communication

Job description

Marcus Donald is seeking a Cyber Security Analyst (L1) to join a global security operations team in London. The role focuses on monitoring, threat detection, and incident response within a fast-paced enterprise environment.

This contract offers a 6-month term, hybrid work with two days per month in the London City office, and a day rate of £250 inside IR35. The successful candidate will work with SIEM tools, contribute to incident handling, and help improve security controls.