Information Security Analyst

Fuse Energy Supply; Greater London; On-site; GBP 63,000 - 103,000; Full time

Benefits offered by this job

Biannual bonus scheme

Fully expensed tech

Paid annual leave

Breakfast and dinner allowance for on‑

office-based employees

Job summary

Fuse Energy, a forward-thinking renewable energy startup, seeks a skilled security professional to own security monitoring end-to-end across our AWS, endpoints, and cloud identity providers. You will develop detections and runbooks, lead incident response, and collaborate with IT to strengthen policies.

Ideal candidates bring hands-on SOC/IR experience, knowledge of attacker tradecraft, and proficiency with EDR tools like CrowdStrike or SentinelOne.

Qualifications

• Background in IT, SOC operations or other hands-on technical work.
• Solid grasp of cloud infrastructure, ideally AWS.
• Strong networking knowledge to read PCAPs and reason about VLANs/firewalls.
• Knowledge of attacker tradecraft and mapping investigations to it.
• Comfortable scripting in Python to automate enrichment, triage, and response.
• Strong ownership mindset with end-to-end accountability.
• Familiarity with an EDR platform (CrowdStrike, SentinelOne or Defender).
• Experience with detection-as-code (Sigma, Git-based detections, CI-tested).
• SOAR or automation experience for response workflows.
• Experience defending data centres or colocation environments (OOB networks, BMC/IPMI).
• Experience handling ISO27001 or SOC2 audits.
• Familiarity with FortiGate logging and NetFlow/sFlow analysis.
• DFIR certifications are useful but not required.
• Experience in energy, fintech, trading or similar high-value target environments.

Responsibilities

• Escalation point for IT in IAM, security, and automation areas.
• Champion security AI tooling to ease colleagues' work.
• Own end-to-end security monitoring: build log pipelines from AWS, endpoints, identity providers, SaaS logs, and networks.
• Write and maintain detection rules to reduce noise and cover attacker behavior.
• Lead incident response from detection to containment and post-mortem; maintain IR runbooks.
• Perform forensic analysis on endpoints, cloud workloads, and accounts; preserve evidence.
• Collaborate with IT to improve security and IT policies and docs.
• Be the point of contact for external audits and assessments.
• Track threat intel relevant to energy and trading; translate to detections and hunts.
• Run threat-led vulnerability management and drive remediation with IT/engineering teams.
• Monitor security of data centre environments and ensure segmentation compliance.
• Feed findings back into prevention with IT and engineering teams.

Skills

Cloud infrastructure

Reading PCAPs

Network analysis

Python scripting

EDR experience

Threat hunting

Security ownership

Investigation mapping

Energy/fintech exposure

Incident response

Tools

CrowdStrike

SentinelOne

Defender

Sigma

Git

CI/CD detections

SOAR

FortiGate

NetFlow/sFlow

Job description

Salary: £63,000 - 103,000 per year

Requirements:

• Background in IT, SOC operations, or other hands-on technical work
• Solid grasp of cloud infrastructure, ideally AWS
• Strong networking knowledge: can read a PCAP, spot beaconing in flow logs, and reason about lateral movement across VLANs and firewalls
• Knowledge of attacker tradecraft, including initial access, persistence, privilege escalation, and exfiltration, and the ability to map an investigation to it
• Comfortable scripting in Python or similar to automate enrichment, triage, and response
• Strong ownership mindset: sees things through end-to-end with little guidance
• Deep familiarity with an EDR platform such as CrowdStrike, SentinelOne, or Defender as an investigation tool
• Detection-as-code experience, including Sigma, detection rules in Git, and CI-tested detections
• SOAR or custom automation experience for response workflows
• Experience defending data centre or colocation environments, including OOB networks, BMC/IPMI, and physical access telemetry
• Experience handling security audits such as ISO27001 or SOC2
• Familiarity with FortiGate logging and NetFlow/sFlow analysis
• DFIR certifications such as GCIH, GCFA, or GCIA are useful but not required
• Experience in energy, fintech, trading, or another high-value-target environment

Responsibilities:

• Act as an escalation point for IT in areas such as IAM, security, and automation
• Act as our security AI champion, building tools to make everyones jobs easier
• Own security monitoring end to end: build and tune log pipelines from AWS, endpoints, identity providers, SaaS audit logs, and network infrastructure into a coherent detection stack
• Write, test, and maintain detection rules that reduce noise and measure coverage against real attacker behaviour
• Lead incident response from detection through containment, eradication, and post-mortem; own the IR runbooks and keep them tested through tabletop exercises
• Perform forensic analysis on compromised endpoints, cloud workloads, and accounts, preserving evidence properly when it matters
• Work with IT to develop and improve security and IT policies and documentation
• Act as the point of contact for the business on external audits and assessments
• Track threat intelligence relevant to energy, trading, and GPU infrastructure and turn it into detections and hunts
• Run vulnerability management from a threat-led angle: prioritise by exploitability and exposure, and drive remediation through the IT and engineering teams who own the fixes
• Monitor the security of our data centre environments and flag anything that breaks the segmentation model
• Feed findings back into prevention by working with IT and engineering to close root causes

Technologies:

• AI
• AWS
• Cloud
• FortiGate
• Flow
• Git
• IAM
• Network
• Python
• Security
• Firewall

More:

We are Fuse Energy, a forward-thinking renewable energy startup on a mission to deliver a terawatt of renewable energy fast. We are building a fully integrated energy company, from developing energy generation projects to real-time power trading and distributed energy installations, and by selling directly to consumers we aim to cut out the middleman, lower costs, and pass on savings to customers. We raised $170M from top-tier investors including Multicoin, Balderton, Lakestar, Accel, Creandum, Lowercarbon, Ribbit, Box Group, and strategic angels. This is a full-time role based within the team that owns security across our IT and cloud environment, spanning AWS infrastructure, identity providers, endpoints, SaaS applications, and our data centre environments. Benefits include a biannual bonus scheme, fully expensed tech to match our needs, paid annual leave, and breakfast and dinner allowance for office-based employees.

• biannual bonus scheme
• fully expensed tech to match our needs
• paid annual leave
• breakfast and dinner allowance for office-based employees

last updated 36 week of 2026