Information Security Analyst

Fuse Energy, LLC; Greater London; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Private health insurance

Fully expensed tech equipment

Biannual bonus scheme

Office meals for onsite

Job summary

Fuse Energy, LLC is seeking a hands-on Information Security Analyst to protect our AWS-based cloud and on-prem environments. You will own end-to-end security investigations, automate triage, and build detections to reduce incident response time.

The role emphasizes threat detection, incident response, and collaboration with IT and engineering to improve security controls across data centres, endpoints, and SaaS tools.

Qualifications

• Hands-on IT or SOC experience
• Strong cloud security knowledge (AWS preferred)
• Proficient in scripting to automate triage and response
• Ability to own incidents end to end from detection to post-mortem

Responsibilities

• Act as escalation point for IT in IAM, security and automation
• Lead incident response from detection through containment and post-mortem
• Build and maintain detection rules to reduce noise and improve coverage
• Perform forensic analysis on endpoints and cloud workloads
• Develop and improve security policies and documentation
• Coordinate with IT/engineering to drive remediation and audits

Skills

Python scripting

Cloud security

Ownership mindset

Tools

CrowdStrike

SentinelOne

Defender

Sigma

Git (detections)

Job description

Fuse is an AI-first energy company on a mission to make energy abundant and affordable, fast. We combine first-principles thinking with cutting-edge technology to build a radically better energy system.

We've raised over $200M from top-tier investors including Balderton, Lakestar, Accel, Creandum, Lowercarbon, Ribbit, 20VC, Hummingbird and Collaborative Fund, alongside strategic angels including Nico Rosberg and GPs behind Meta, Revolut, Spotify and Uber.

We're building a fully integrated energy company: developing our own solar, batteries and other generation projects, building our own hardware, improving and developing grid infrastructure, trading power in real time, and installing distributed energy in homes. By selling directly to consumers, we cut out the middleman, lower costs and pass the savings on to our customers.

We're looking for a hands-on, technically skilled Information Security Analyst to keep Fuse secure at full speed. You'll sit within the team that owns security across our IT and cloud environment, spanning AWS infrastructure, identity providers, endpoints, SaaS applications and our data centre environments, acting as the security escalation point for IT. The ideal candidate is a problem-solver comfortable owning issues end to end, from investigating a compromised account to automating the repetitive parts of triage and response.

Responsibilities

• Act as an escalation point for IT in areas such as IAM, security, and automation
• Act as the security AI champion, building tools to make everyone's jobs easier
• Own security monitoring end-to-end: build and tune log pipelines from AWS (CloudTrail, GuardDuty, VPC Flow Logs), endpoints, identity providers, SaaS audit logs, and network infrastructure into a coherent detection stack
• Write, test, and maintain detection rules that reduce noise and measure coverage against real attacker behaviour
• Lead incident response from detection through containment, eradication, and post-mortem; own the IR runbooks and keep them tested through tabletop exercises
• Perform forensic analysis on compromised endpoints, cloud workloads, and accounts, preserving evidence properly when it matters
• Work with IT to develop and improve security and IT policies and documentation
• Act as the point of contact for the business on external audits and assessments
• Track threat intelligence relevant to energy, trading, and GPU infrastructure and turn it into detections and hunts
• Run vulnerability management from a threat-led angle: prioritise by exploitability and exposure, and drive remediation through the IT and engineering teams who own the fixes
• Monitor the security of our data centre environments (firewall logs, OOB access, east-west traffic) and flag anything that breaks the segmentation model
• Feed findings back into prevention by working with IT and engineering to close root causes

Requirements

• Background in IT, SOC operations or other hands-on technical work
• Solid grasp of cloud infrastructure, ideally AWS
• Strong networking knowledge: can read a PCAP, spot beaconing in flow logs, and reason about lateral movement across VLANs and firewalls
• Knows attacker tradecraft (initial access, persistence, privilege escalation, exfiltration) and can map an investigation to it
• Comfortable scripting in Python or similar to automate enrichment, triage and response
• Strong ownership mindset: sees things through end to end with little guidance
• Bonus: deep familiarity with an EDR platform (CrowdStrike, SentinelOne, Defender); detection-as-code (Sigma, detections in Git, CI-tested); SOAR or custom response automation; defending data centre or colocation environments (OOB networks, BMC/IPMI, physical access telemetry); handling ISO 27001 or SOC 2 audits; FortiGate logging and NetFlow/sFlow analysis; DFIR certifications (GCIH, GCFA, GCIA); energy, fintech, trading or other high-value-target experience

Benefits

• Competitive salary and eligibility for equity
• Biannual bonus scheme
• Fully expensed tech to match your needs
• Private health insurance
• Breakfast and dinner allowance for office-based employees

As we hire globally, benefits vary by location.