Senior Cyber Security Analyst

ENSEK Ltd; Greater London, Nottingham; Híbrido; GBP 70.000 - 100.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

25 days holiday

5 extra annual leave days (buy/sell)

Private health insurance

Pension with 5% matched

Team events

Volunteer days (2)

Descripción de la vacante

ENSEK Ltd in the UK is seeking a Senior Cyber Security Analyst to own the design, development and continuous improvement of detection and response capabilities within Security Operations. You will lead major incidents and mentor junior analysts while collaborating with Engineering and Platform teams to keep ENSEK resilient against evolving threats.

You will drive threat-informed detection engineering, maintain MITRE ATT&CK coverage, automate responses with playbooks, and contribute to ISO 27001,

Formación

• Proven experience in Security Operations or Incident Response leading complex investigations.
• Hands-on SIEM expertise including rule development and tuning.
• Experience guiding major incidents from triage to post-incident review.
• Apply MITRE ATT&CK framework to detection, threat hunting and assessments.
• Experience developing security automation and orchestration workflows.

Responsabilidades

• Lead security incident response end-to-end for high-severity events.
• Design and optimise SIEM detections with MITRE ATT&CK coverage.
• Collaborate with Threat & Vulnerability teams to operationalise intel.
• Develop playbooks and automated response workflows.
• Mentor junior analysts and provide security input on architecture decisions.
• Maintain reporting metrics and support ISO 27001, SOC 2, NIS2 compliance.

Conocimientos

SIEM expertise

MITRE ATT&CK

Incident response

Threat intelligence

Security automation

Cloud security

EDR/MDR

Vulnerability management

Stakeholder comms

Team leadership

Descripción del empleo

About ENSEK

ENSEK builds the cloud‑native SaaS software that’s transforming how energy retailers operate, innovate and manage at scale.

We help retailers lower operating costs, improve billing accuracy for consumers, and enhance customer experience through automation and AI‑driven insight, all underpinned by modern, cloud‑native architecture.

ENSEK is at an exciting inflection point as we scale at pace towards new international horizons. If you’re driven by solving complex, real‑world problems and want to build modern technology that accelerates the global energy transition, you’ll feel right at home with us.

About the role

As a Senior Cyber Security Analyst, you'll act as a technical authority within Security Operations, owning the design, development and continuous improvement of our detection and response capabilities.

You'll lead the response to major security incidents, drive threat-informed detection engineering, influence security architecture decisions, and work closely with colleagues across Security, Engineering and Platform teams to ensure ENSEK remains resilient against evolving threats.

This role combines hands‑on technical expertise with leadership responsibilities, offering the opportunity to mentor junior analysts while contributing to strategic security initiatives across the business.

Key responsibilities:

• Lead Security Incident Response by managing high‑severity security incidents end‑to‑end, coordinating containment and recovery activities, conducting post‑incident reviews, and acting as the senior technical lead during P1/P2 events.




• Own Detection & Response Capability through the design, development and optimisation of SIEM detections, maintaining MITRE ATT&CK coverage, improving detection effectiveness, and identifying gaps across ENSEK's security monitoring landscape.




• Drive Threat‑Informed Security Operations by partnering with Threat & Vulnerability teams to operationalise threat intelligence, support vulnerability management activities, and ensure security operations remain aligned to ENSEK's evolving threat profile.




• Enhance Security Automation & Operational Efficiency through the development of playbooks, automated response workflows, alert enrichment capabilities, and tool integrations that reduce analyst effort and improve response times.




• Provide Security Leadership & Assurance by acting as the primary escalation point for Security Operations, mentoring analysts, supporting threat modelling activities, and providing security input into architectural and engineering decisions.




• Deliver Security Reporting & Compliance Support by owning operational metrics and performance reporting, communicating risk to stakeholders, and contributing evidence and control monitoring activities supporting ISO 27001, SOC 2 and NIS2 compliance requirements.

Key outcomes:

• Maintain an effective detection and response capability, continuously improving SIEM coverage, reducing false positives, and identifying gaps through MITRE ATT&CK aligned monitoring.




• Lead the successful resolution of security incidents, ensuring timely containment, clear stakeholder communication, thorough post‑incident reviews, and implementation of lessons learned.




• Strengthen ENSEK's security posture by operationalising threat intelligence, supporting vulnerability remediation activities, and proactively identifying emerging risks.




• Improve operational efficiency through the development of security automation, response playbooks and workflow enhancements that reduce manual effort and accelerate investigation and response times.




• Increase security maturity across the organisation by providing security assurance to projects, supporting threat modelling activities, and embedding security monitoring requirements into new services and platforms.




• Contribute to a high‑performing Security Operations function by mentoring analysts, delivering meaningful operational reporting, and supporting compliance obligations including ISO 27001, SOC 2 and NIS2.

Experience required:

• Proven experience operating within a Security Operations, Cyber Security Analyst, Security Engineer or Incident Response role, with responsibility for leading complex security investigations and major incident response activities.




• Strong hands‑on experience with SIEM platforms, including detection engineering, alert tuning, correlation rule development, coverage mapping, and the continuous improvement of monitoring capabilities.




• Demonstrable experience leading security incidents from initial triage through to containment, recovery and post‑incident review, including stakeholder management during high‑severity events.




• Practical experience applying the MITRE ATT&CK framework to detection engineering, threat hunting, investigations, threat modelling, or security control assessment.




• Experience developing or supporting security automation and orchestration workflows, including the creation of playbooks, automated response actions, and integrations between security tools.




• Experience working with cloud security technologies, endpoint detection and response (EDR/MDR) solutions, threat intelligence, and vulnerability management processes within a modern technology environment.




• Strong communication skills with the ability to translate technical security risks, threats and vulnerabilities into clear, business‑focused recommendations for both technical and non‑technical stakeholders.




• Experience mentoring, coaching or providing technical leadership to junior analysts, helping to develop team capability through knowledge sharing, documentation and continuous improvement initiatives.

Company Benefits

• 25 days’ holiday + bank holidays




• Option to buy or sell 5 extra annual leave days per year




• Vitality Health Insurance, including private healthcare, virtual GP access, mental‑health support and wellbeing perks (50% off gym memberships-Virgin Active, Nuffield, PureGym)




• Pensionwith5% matched contribution




• Regular team‑wide and company‑wide events




• 2 volunteering days per year to give back




• Remote‑first working environment with offices in London and Nottingham