Senior Cyber Defence Analyst - Incident Response Lead

A&O Shearman; Belfast City District; On-site; GBP 70,000 - 110,000; Full time

Job summary

A&O Shearman, based in Belfast, seeks a Senior Cyber Defence Analyst to join its Information Security team. The role focuses on in-depth analysis, incident response, and guiding junior colleagues within a global firm.

Weekend working is a requirement with premium pay for weekend hours; you will be part of a 24-7 follow-the-sun model, supporting threat detection, response, and continuous improvement of cyber defence processes.

Qualifications

• Experience in a security operations role across multiple domains (4+ of listed).
• Strong networking knowledge including TCP/IP and DNS.
• Familiarity with security tooling such as SIEM, IDS/IPS, and threat management platforms.
• Excellent communication translating security concepts to business language.

Responsibilities

• Investigate Level 2 escalated events and alerts to identify potential incidents.
• Assist and advise junior colleagues during investigations.
• Conduct initial triage and investigation of confirmed incidents.
• Perform containment, mitigation, and remediation activities with forensic evidence documentation.
• Participate in security incident response exercises and post-exercise reviews.
• Be part of the on-call rota and may require out-of-hours work.
• Coordinate incident hand-offs across time-zones in our 24-7 model.
• Maintain and improve playbooks and process documentation for Cyber Defence.

Skills

Security operations

Incident response

Threat intelligence

DFIR

Communication skills

Education

Bachelor's degree in InfoSec

Tools

SIEM

IDS/IPS

Threat management platforms

Endpoint protection

Firewalls

Job description

A&O Shearman, based in Belfast, seeks a Senior Cyber Defence Analyst to join its Information Security team. The role focuses on in-depth analysis, incident response, and guiding junior colleagues within a global firm.

Weekend working is a requirement with premium pay for weekend hours; you will be part of a 24-7 follow-the-sun model, supporting threat detection, response, and continuous improvement of cyber defence processes.