Senior Cyber Security Analyst

Northern Powergrid; Sunderland; On-site; GBP 55,000 - 65,000; Full time

Benefits offered by this job

25 days holiday

15% Performance Bonus

Job summary

Northern Powergrid in Sunderland is seeking a Senior Cyber Security Analyst to join the Digital & Innovation team. You will lead 24/7 security monitoring, incident response and threat detection across endpoints, networks and cloud, ensuring regulatory standards are met.

The role requires 3–5+ years in information security, strong SIEM experience (QRadar, Splunk, Microsoft Sentinel) and hands-on SOC expertise. Salary between £55,000-£65,000 plus 25 days holiday and a 15% bonus.

Qualifications

• 3-5+ years in information security, SOC operations, incident response or threat detection.
• Hands-on experience in Security Operations or SOC environments.
• High level understanding of IT and operating systems (Microsoft and Linux).
• Experience coaching or leading junior team members is advantageous.
• Demonstrated experience with SIEM tools, network security, and incident response processes.
• Ability in alert triage, threat analysis, log analysis, and vulnerability management.
• Understanding of networking protocols, cloud security, and common attack techniques.
• RFQ Level 5 (HNC) in Cyber Security, Computer Science, Information Security, or similar technical discipline. Or extensive professional experience
• CompTIA Security+, CySA+, or CEH
• SIEM certifications (e.g., Splunk, Microsoft Sentinel, QRadar)

Responsibilities

• Lead response to complex/high-severity incidents, acting as technical authority for investigation and recovery.
• Direct incident response, stakeholder engagement and post-incident reviews.
• Perform deep forensic and threat analysis across endpoint, network and cloud.
• Lead threat hunting and identification of advanced adversary activity.
• Design and optimise detection use cases aligned to threat intelligence (e.g. MITRE ATT&CK).
• Drive continuous improvement of SOC detection, response and automation (e.g. SOAR).
• Provide technical leadership and mentoring to L1/L2 analysts.
• Oversee endpoint, firewall and network security controls, including complex rule and policy design.
• Ensure incident handling meets audit and regulatory standards (NIS/CAF).
• Support cyber exercises, red/purple teaming and SOC strategy development.
• Previous experience within an advanced Security Analyst or SOC Analyst role including incident response.
• Experience with SIEM technologies (e.g., QRadar, XSOAR).
• Strong problem-solving and technical troubleshooting skills including threat hunting
• Advanced understanding of information security fundamentals.
• Ability to prioritise a constantly changing workload.
• Effective communicator able to guide and support less experienced analysts.

Skills

Incident response

Threat hunting

SIEM tools

Endpoint security

Network security

Cloud security

Problem solving

Communication skills

Leadership

Education

RFQ Level 5 in Cyber Security

RFQ Level 5 in Information Security

Tools

Splunk

Microsoft Sentinel

QRadar

Job description

Do you want to help power your career and be part of an evolving energy industry?

An exciting opportunity has arisen for a Senior Cyber Security Analyst to join our Digital & Innovation team.

The energy industry is advancing with investment in smart technology innovation and Northern Powergrid, as the company responsible for powering everyday life for 8 million customers across 3.9 million homes and businesses in the North East, Yorkshire and northern Lincolnshire, is at the forefront of delivering a power network that meets the region’s needs now and in the future.

As a member of the Berkshire Hathaway Energy Global Security Operations Centre (GSOC), the Senior Cyber Security Analyst will take a lead role in the 24×7×365 security monitoring of Northern Powergrid information systems, while supporting and continuously improving our cyber protection, detection and response infrastructure.

Along with a competitive salary of between £55,000 - £65,000 we also offer great benefits such as:

25 days holiday;

15% Performance Bonus.

SC-level National Security Vetting clearance is required for this role. Candidates will be required to have lawfully resided in the UK for a minimum of 5 years to support security clearance processes.

Key Responsibilities

• Lead response to complex/high-severity incidents, acting as technical authority for investigation and recovery.
• Direct incident response, stakeholder engagement and post-incident reviews.
• Perform deep forensic and threat analysis across endpoint, network and cloud.
• Lead threat hunting and identification of advanced adversary activity.
• Design and optimise detection use cases aligned to threat intelligence (e.g. MITRE ATT&CK).
• Drive continuous improvement of SOC detection, response and automation (e.g. SOAR).
• Provide technical leadership and mentoring to L1/L2 analysts.
• Oversee endpoint, firewall and network security controls, including complex rule and policy design.
• Ensure incident handling meets audit and regulatory standards (NIS/CAF).
• Support cyber exercises, red/purple teaming and SOC strategy development.
• Previous experience within an advanced Security Analyst or SOC Analyst role including incident response.
• Experience with SIEM technologies (e.g., QRadar, XSOAR).
• Strong problem-solving and technical troubleshooting skills including threat hunting
• Advanced understanding of information security fundamentals.
• Ability to prioritise a constantly changing workload.
• Effective communicator able to guide and support less experienced analysts.

Skills, Knowledge & Qualifications

Essential Qualifications and Experience

• NPg form part of the critical national infrastructure, for this reason all applicants will require security clearance that requires the candidate to have lawfully resided in the UK for at least 5 years.
• 3-5+ years working in information security, SOC operations, incident response, or threat detection roles. Hands on experience in Security Operations or SOC environments.
• High level understanding of IT and operating systems (Microsoft and Linux).
• Experience coaching or leading junior team members is advantageous.
• Demonstrated experience with SIEM tools, network security, and incident response processes.
• Ability in alert triage, threat analysis, log analysis, and vulnerability management.
• Understanding of networking protocols, cloud security, and common attack techniques.
• Minimum of RFQ Level 5 (HNC) in Cyber Security, Computer Science, Information
• Security, or similar technical discipline. Or extensive professional experience
• CompTIA Security+, CySA+, or CEH
• SIEM focused certifications (e.g., Splunk, Microsoft Sentinel, QRadar)

Desirable Qualifications and Experience

• Experience in threat hunting, forensic analysis, or malware analysis.
• Familiarity with cloud environments (AWS/Azure) and their security models.
• Experience improving SOC processes, tuning detection rules, or leading incident response.
• Knowledge of compliance frameworks (e.g., NIST, ISO 27001).
• CISSP, GCIH, GCIA, GMON, GIAC certifications
• RFQ Level 6 (degree) in Cyber Security or Information Assurance

Additional Information

Posted: 10/06/26

Closing date for applications: 01/07/26

Provisional date for interviews: W/C 13/07/2026

Hours: 37 hours per week, Shared Cover Monday – Friday between 08:00 and 18:00

Location: Sunderland

We reserve the right to close this advert early dependent on number of applications

Applicants are considered on the basis of their suitability for the post irrespective of sex, marital status, sexual orientation, gender re-assignment, race, age or disability, in accordance with the Equality Act 2010.