Senior Cyber Security Analyst

E.ON; Nottingham; Hybrid; GBP 61,000 - 82,000; Full time

Benefits offered by this job

26 days annual leave

Generous pension

Life cover

Bonus opportunities

Flexible benefits

Hybrid working

Job summary

E.ON is seeking a Senior Cyber Security Analyst to join our Digital Technology team on a permanent basis with hybrid working from Nottingham, Solihull or Kingswinford. The role involves owning incident response, risk assessments and vulnerability management to protect E.ON's technology, data and digital services.

The position requires hands-on experience in security operations, strong regulatory knowledge, and the ability to lead security governance.

Qualifications

• Proven industry experience in cyber security.
• Experience with incident response and risk assessments.
• Knowledge of regulatory requirements and security standards.

Responsibilities

• Investigate and respond to cybersecurity incidents.
• Conduct risk and vulnerability assessments.
• Implement and monitor technical security controls.
• Support cloud, networks and endpoints security.
• Lead audits and compliance activities.
• Develop security policies and procedures.
• Provide security awareness guidance.
• Identify opportunities to enhance security capabilities.

Skills

Cyber security

Incident response

Risk assessment

Regulatory compliance

Stakeholder engagement

Education

CISSP certification pursuit

Tools

SIEM

Endpoint protection

Vulnerability management

Job description

We are looking for a Senior Cyber Security Analyst to join our Digital Technology team on a permanent basis, with hybrid working from Nottingham, Solihull or Kingswinford.

Senior Cyber Security Analyst

Salary- £60,875 - £81,543

Location- Nottingham, Solihull or Kingswinford with hybrid working

As a Senior Cyber Security Analyst, you'll independently manage operational cybersecurity activities to help protect E.ON's technology, data and digital services. You'll take ownership of incident response, risk assessments, vulnerability management and the implementation of security controls, ensuring security risks are effectively managed and systems remain secure and resilient.

You'll also play a key role in maintaining regulatory compliance and strengthening security governance across the organisation. This is an opportunity to apply your expertise, drive effective security practices and help safeguard critical services while fostering a strong security culture across the business.

The role holder will form part of our out of hours cyber security incident response.

What you'll be doing

• Investigate and respond to cybersecurity incidents, helping to minimise risks and protect the organisation's systems and data.
• Conduct security risk assessments and vulnerability assessments, identifying potential threats and recommending appropriate mitigation measures.
• Implement, monitor and maintain technical security controls to strengthen the organisation's security posture.
• Support the security of cloud environments, networks and endpoint devices, ensuring systems remain protected against emerging threats.
• Lead cybersecurity compliance activities and support internal and external audits, ensuring adherence to relevant regulatory and security requirements.
• Develop, maintain and improve security policies, standards and procedures to support effective security governance.
• Provide security awareness guidance to colleagues, promoting best practices and fostering a strong security culture across the organisation.
• Identify opportunities to enhance security capabilities, recommending and implementing improvements to strengthen resilience and reduce risk.

What we need from you

• Proven industry experience in cyber security, ideally 3-5 years, with a recognised professional qualification such as CISSP or working towards it, supported by ongoing CPD.
• Strong understanding of security operations, risk management and regulatory compliance.
• Experience using SIEM, endpoint protection and vulnerability management tools.
• Working knowledge of relevant regulatory requirements, industry standards and recognised security frameworks.
• Industry experience with SEC, REC, CAF and UKCSRB.
• Ability to investigate and respond effectively to security incidents, applying sound judgement and a structured approach to incident management.
• Strong risk assessment skills, with the ability to identify, evaluate and manage cybersecurity risks.
• Experience identifying, prioritising and supporting the remediation of security vulnerabilities.
• Ability to support regulatory compliance and ensure adherence to relevant requirements and security standards.
• Strong technical troubleshooting and problem-solving skills, with the ability to investigate and resolve security-related issues.
• Effective stakeholder engagement and communication skills, with the ability to build relationships and communicate security matters clearly.
• A collaborative approach to teamwork, working effectively with colleagues and stakeholders to achieve shared security objectives.

What you need to know

• Award-Winning Workplace - We're proud to be named a Sunday Times Best Place to Work 2025 and the Best Place to Work for 16-34-year-olds .
• Outstanding Benefits - Enjoy 26 days of annual leave plus bank holidays, a generous pension, life cover, bonus opportunities, and access to 20 flexible benefits with tax/NI savings.
• Flexible & Family-Friendly - Our industry-leading hybrid and family-friendly policies earned us double recognition at the Personnel Today Awards 2024 .
• Inclusive & Diverse - We're the only energy company in the Inclusive Top 50 UK Employers . We're also proud winners of Best Employer for Women and Human Company of the Year -recognising our inclusive, people-first culture.
• Support at Every Stage of Life - We're Fertility Friendly and Menopause Friendly accredited, with inclusive support for everyone.
• Accessible & Supportive - Do you consider yourself as having a disability? As a Disability Confident Employer, we ensure that disabled applicants who meet the minimum criteria move forward to the next stage of our recruitment process, and will make any adjustments needed during the process.
• Invested in Your Growth - From inclusive talent networks to top-tier development programmes, we'll support your g