InfoSec Analyst

Carbon3ai Limited.; United Kingdom; On-site; GBP 55,000 - 75,000; Full time

Job summary

Era4 is seeking an Infosec Analyst to join our Security Operations Center in the UK. You will monitor security events, analyse logs from firewalls, datacentre networking, and cloud infrastructure, and coordinate incident response across engineering and operations teams.

You will triage alerts, perform threat hunting, contribute to runbooks, and help advance Era4's security posture as we scale next-generation AI datacentre platforms.

Qualifications

• Experience in security operations, SOC, incident response, or infosec analysis.
• Solid knowledge of SIEM platforms and log analysis.
• Hands-on firewall and network security tool experience (Palo Alto, pfSense, Nokia, OpnSense).
• Understanding cloud security, Kubernetes and containerized environments.
• Familiarity with NIST incident response framework.

Responsibilities

• Monitor SIEM platforms and logging infrastructure across datacentre and cloud.
• Ingest and analyse logs from firewalls and GPU infra.
• Triage and investigate alerts by severity.
• Respond to on-call incidents outside business hours.
• Lead deep-dive investigations into security incidents.
• Analyse firewall logs and network traffic to identify root causes.
• Conduct threat hunting to find indicators of compromise.
• Coordinate security incident response activities.
• Communicate incident status to engineering and operations.
• Document incidents and contribute to post-incident analysis.
• Support remediation efforts.

Skills

SOC operations

Incident response

Log analysis

Firewall logs

Cloud security

Kubernetes

Containerization

NIST IR framework

Tools

Palo Alto

OpnSense

pfSense

Nokia

NVIDIA GPU infra

SIEM

Job description

Era4 develops, owns and operates AI infrastructure across the UK, powered by renewable energy. Converting legacy industrial and energy sites into modern data-centre facilities, Era4 is combining brownfield regeneration opportunities with cleaner, efficient, scalable compute capacity for healthcare, research, finance, enterprise, and public-sector organisations

Role Summary:

We are seeking an Infosec Analyst to serve as the primary operational interface into Era4's Security Operations Center (SOC). This role focuses on security monitoring, threat detection, incident response, and protecting our next-generation AI datacentre infrastructure, cloud platforms, and applications through proactive security operations.

You will be the key point of contact between security monitoring systems and engineering/operations teams, responsible for monitoring our datacentre security estate, identifying threats across network infrastructure and Era4's proprietary cloud platform, coordinating incident response, managing alerts, and continuously improving our security posture.

The successful candidate combines strong technical security knowledge with hands-on experience analysing logs from enterprise firewalls, datacentre networking, and proprietary infrastructure platforms, along with excellent communication skills and the ability to triage and elevate issues effectively.

Key Responsibilities:

Security Monitoring & Alert Management:

• Monitor SIEM platforms, security tools, and logging infrastructure across datacentre and cloud environments.
• Ingest, parse, and analyse logs from Palo Alto firewalls, OpnSense, Nokia networking platforms, and Nvidia GPU infrastructure.
• Triage, prioritise and investigate security alerts based on severity and business impact.
• Respond to on-call security incidents outside business hours.
• Perform deep-dive investigations into security incidents and suspicious activities across Era4's datacentre and proprietary cloud infrastructure.
• Analyse firewall logs (Palo Alto, OpnSense), network traffic, system events, and GPU infrastructure telemetry to identify root causes and attack patterns.
• Conduct threat hunting activities to proactively identify indicators of compromise in datacentre traffic and network flows.
• Act as primary coordinator for security incident response activities.
• Communicate incident status and impact to stakeholders across engineering and operations teams.
• Document incidents and contribute to post-incident analysis and lessons learned and support remediation efforts.

Vulnerability & Risk Management:

• Monitor vulnerability disclosures and security advisories relevant to Era4's technology stack.
• Track vulnerability remediation efforts and report on remediation timelines.
• Support vulnerability scanning and assessment activities.

Security Operations & Compliance:

• Maintain and update incident response runbooks, procedures, and playbooks.
• Support compliance activities including log retention, evidence gathering, and audit support.
• Generate security reports and metrics for management and stakeholder review.

Cross-functional Collaboration:

• Serve as primary interface between SOC, engineering, platform, and operations teams.
• Communicate security findings and remediation guidance in clear, actionable terms.
• Support security training and awareness initiatives.

Required Qualifications & Experience:

• Ability to work independently and manage multiple priorities in a fast-paced environment.
• Experience in security operations, SOC operations, incident response, or infosec analysis.
• Solid knowledge of SIEM platforms, log aggregation, security monitoring tools, analysing firewall logs.
• Hands-on experience investigating security incidents and performing detailed log analysis.
• Demonstrated experience with firewall and network security tools (Palo Alto, pfSense, Nokia, OpnSense, or similar).
• Proven understanding of cloud platform security, Kubernetes, and containerized environments.
• Familiarity with NIST incident response framework and incident response procedures, vulnerability management and threat assessment methodologies.

Nice To Have:

• Knowledge of datacentre operations (GPU or AL/ML infrastructure is welcome), infrastructure monitoring, or network operations.
• Familiarity with compliance frameworks such as SOC 2, ISO 27001, or PCI DSS.
• Security certifications such as Security+, CEH, ECIH, GCIH, or similar.
• Experience in DevOps, SRE, or cloud operations environments.
• Scripting experience (Python, Bash, etc.) to automate routine investigations and log parsing.

Why Join Era4:

You’ll be joining a mission-driven start-up building critical national infrastructure, where operational excellence directly enables growth. This role offers high visibility with leadership, real autonomy, and the chance to shape how a next-generation company operates at scale.

Diversity & Inclusion :

Era4 is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

Technology

United Kingdom: (Occasional office visit required)