Principal Cyber Security Operations Analyst

Post Office Ltd; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Annual leave

Bonus potential

Car allowance

Pension

Digital GP

Life assurance

Online courses

Discounts platform

Job summary

Post Office Ltd invites applications for a Principal Cyber Security Operations Analyst to strengthen and lead cyber detection, investigation and response capabilities.

You will collaborate with technology teams and security specialists, providing technical leadership, driving operational excellence, and protecting a nationally significant organisation from evolving cyber threats.

Qualifications

• Significant experience across Cyber Security Operations, Incident Response, Digital Forensics or IT Security in a large complex environment.
• Proven technical leadership across security operations and incident response activities.
• Experience with SIEM/EDR technologies such as Microsoft Sentinel, Splunk, Microsoft Defender and Trend Micro.

Responsibilities

• Lead complex cyber investigations and act as a key escalation point for major incidents.
• Mentor junior analysts and drive continuous improvement of security operations and processes.
• Develop and improve incident response playbooks, detection use cases and SOC procedures.
• Provide clear, timely incident reports to stakeholders and executives.

Skills

SIEM

EDR

Incident Response

Digital Forensics

Threat Detection

Cloud Security

Azure

AWS

Security Operations

Stakeholder Management

Tools

Microsoft Sentinel

Splunk

Microsoft Defender

Trend Micro

Job description

Career Opportunities: Principal Cyber Security Operations Analyst (19014)

Salary : Competitive plus comprehensive benefits package
Grade: 3A
Reporting Line: Head of Cyber Security Operations
Contract Type : Permenant
Working pattern: Hybrid
Location: London/Bolton
Closing Date : 22nd September 2026 (Applications may close sooner if we receive vast numbers)

What to expect

As aPrincipal Cyber Security Operations Analyst, you will join us on our journey and undertake a highly influential role responsible for strengthening and enhancing Post Office's cyber detection, investigation and response capabilities.

You will work collaboratively with technology teams, business stakeholders and security specialists across the organisation, providing technical leadership, supporting strategic cyber security objectives and driving operational excellence across our Cyber Detect and Response function.

This role offers a unique opportunity to make a tangible impact by protecting a complex and nationally significant organisation, helping to improve cyber resilience, reduce operational risk and safeguard services relied upon by Postmasters, customers, colleagues and communities across the UK.

As a senior technical specialist within the Cyber Detect and Response team, you will lead complex cyber investigations, act as a key escalation point for significant incidents, mentor analysts and drive the continuous improvement of security operations, technologies and processes.

How our people behave is as important to Post Office as what is delivered. The Principal Cyber Security Operations Analyst will role model the Post Office behaviours and demonstrate a Postmaster-first mindset.

What we can do for you

Our business is changing and we understand that attracting the right talent is pivotal in driving the positive change needed, to help us achieve our ambitious goals. Beyond a competitive salary, we offer a comprehensive benefits package that includes:

• 27.5 days annual leave (rising to 30 after 2 years), plus bank holidays
• Up to 18% on target bonus opportunity
• Annual car allowance
• Generous pension scheme with minimum 10% employer contribution
• Access to 24/7 digital GP services and our Employee Assistance Programme
• 6 x Life assurance and income protection after 12 months service
• Over 400 online courses, mentoring, apprenticeships, and development programmes
• Access to our benefits platform for exclusive discounts & savings

To be successful in this role, you will bring significant experience across Cyber Security Operations, Incident Response, Digital Forensics and Threat Detection within a complex enterprise environment. You will be comfortable providing technical leadership, managing complex investigations and influencing stakeholders across both technical and non-technical audiences.

As aPrincipal Cyber Security Operations Analyst, you will act as a senior cyber security specialist, supporting the development of security operations capability while helping to protect Post Office against an evolving cyber threat landscape.

In addition to this, the ideal candidate will:

• Demonstrate substantial experience within Cyber Security Operations, Incident Response, Digital Forensics or IT Security in a large, complex environment.
• Be an experienced technical leader, capable of providing direction, guidance and technical authority across security operations and incident response activities.
• Have proven experience working with SIEM and EDR technologies such as Microsoft Sentinel, Splunk, Microsoft Defender and Trend Micro.
• Demonstrate strong cyber investigation skills, applying evidence-led analysis, Digital Forensics and Incident Response methodologies to identify, contain and remediate threats.
• Possess excellent communication and stakeholder management skills, with the ability to translate complex technical findings into clear operational, risk and executive-level messaging.
• Build strong relationships across technology teams, suppliers and senior stakeholders to influence decision-making and support cyber security objectives.
• Have experience managing cyber incidents through detection, investigation, containment, remediation and post-incident review activities.
• Demonstrate knowledge of cloud and hybrid environments, including Azure, AWS, networking, identity management and enterprise security controls.
• Have experience developing and improving incident response playbooks, detection use cases and cyber security operational procedures.
• Be confident producing clear and timely incident reports, providing updates on risk, impact, actions and lessons learned to a range of audiences.
• Stay up to date with emerging cyber threats, attack techniques, threat intelligence and industry best practice.
• Understand security frameworks and regulatory requirements including ISO 27001, PCI-DSS, Cyber Essentials Plus and GDPR.
• Demonstrate a commitment to developing others through coaching, mentoring and knowledge sharing while championing equality, diversity, inclusion and continuous improvement.

Desirable Qualifications

• GIAC Certified Incident Handler (GCIH)
• GIAC Certified Forensic Analyst (GCFA)
• Principal Cyber Security Professional (PriCSP)
• Security Operations Analyst Associate (SC-200)
• AWS Certified Security – Specialty

About us

At Post Office Ltd, we’re proud to be at the heart of communities across the UK, upheld by the dedication and service of our postmasters. We offer essential services that people rely on every day, from parcels and banking to identity and government services. While we continue to evolve with digital innovation, our commitment to personal, face-to-face service remains core to who we are.
Our journey is one of reflection, growth, and meaningful change. We’re looking for people who think differently. Those with resilience, purpose, and a deep sense of responsibility to our postmasters, partners and the communities they serve. If you're driven by the chance to make a real impact and help shape a future, built on progress and integrity, we’d love to hear from you. For more details visit [e-mail]

Application Guidance

Our commitment to embracing diversity extends beyond just words. While we’ve outlined key skills above, we recognise that great candidates come from a variety of backgrounds. We value diverse perspectives and are committed to building an inclusive workplace where everyone can thrive.
As a Disability Confident Employer, we recognise the value people with disabilities can bring to our business. If you require any reasonable adjustments throughout the recruitment process or would like further details on the job description, please contact [e-mail]
We’re thrilled by your interest in this opportunity and truly value every application we receive. Please note the advert may close early if we receive a high volume of applications. Unfortunately, we’re unable to provide individual feedback on all submissions.