Security Operations Analyst - Cloud & Incident Response

Hayfin-Capital-Management; Greater London; On-site; GBP 65,000 - 90,000; Full time

Job summary

Hayfin-Capital-Management is seeking a hands-on Cybersecurity Analyst to own day-to-day security operations of our Microsoft-native estate. You will bridge our in-house team with the managed SOC, lead incidents end-to-end, and help shape the security roadmap and automation initiatives.

You will work with the Director of Cloud Infrastructure & Information Security, engineers, Compliance and Risk, and external partners to strengthen defenses, elevate threat detection, and ensure governance across

Qualifications

• Around 3 years' hands-on experience in a SOC, security operations or security engineering role.
• Strong practical experience with Defender XDR, Sentinel, Entra ID and Intune.
• Demonstrable incident response experience.
• Experience working with or alongside a managed SOC or MSSP.
• Clear, concise written communication, from incident reports to management-ready metrics.

Responsibilities

• Acting as first point of escalation from the managed SOC, leading investigation, containment and root-cause analysis for Defender XDR and Sentinel incidents
• Developing and tuning detections and KQL queries, and running threat hunts mapped to MITRE ATT&CK
• Hardening our Microsoft environment across Entra ID, Intune, Defender for Endpoint and Azure, and owning the vulnerability management lifecycle
• Administering our email, web and data security controls, and running the phishing simulation and awareness programme
• Producing audit evidence and monthly security metrics for ISO 27001, FCA and DORA obligations, and supporting due diligence on vendors and portfolio companies
• Holding the managed SOC to account and contributing to the security roadmap

Skills

Incident response

Security operations

Security engineering

Tools

Defender XDR

Sentinel

Entra ID

Intune

Mimecast

Egress

Zscaler

PowerShell

Python

Job description

Hayfin-Capital-Management is seeking a hands-on Cybersecurity Analyst to own day-to-day security operations of our Microsoft-native estate. You will bridge our in-house team with the managed SOC, lead incidents end-to-end, and help shape the security roadmap and automation initiatives.

You will work with the Director of Cloud Infrastructure & Information Security, engineers, Compliance and Risk, and external partners to strengthen defenses, elevate threat detection, and ensure governance across