Senior Cyber Security Analyst – Endpoint & IR Lead

McGregor Boyall; Greater London; On-site; GBP 70,000 - 83,000; Full time

Job summary

McGregor Boyall in London seeks a Senior IT Security Analyst/Engineer to join the global cyber security team. You will own selected security domains end-to-end and drive practical improvements to reduce cyber risk.

Responsibilities include threat detection with EDR tools (CrowdStrike), secure web gateway implementations (Zscaler), vulnerability assessments, and developing small automation dashboards to improve operations.

Qualifications

• Experience owning cyber security domains end-to-end.
• Experience in vulnerability assessment and remediation prioritisation.
• Experience in incident response investigations and tooling.
• Ability to design and deploy small tools, scripts or dashboards.
• Strong knowledge of Microsoft 365, Azure/Entra ID security controls.

Responsibilities

• Own or materially contribute to cyber security domains within the enterprise.
• Investigate detections with EDR tooling (CrowdStrike) and support incident response.
• Implement secure web gateway solutions (Zscaler) and zero-trust controls.
• Perform vulnerability assessments and prioritise mitigations.
• Apply MITRE ATT&CK to guide security improvements.
• Lead or support cyber security investigations and incident response.
• Develop tools or dashboards to automate security operations.
• Integrate tooling into workflows and incident reporting.
• Keep up-to-date with Microsoft 365, Azure/Entra ID security controls.

Skills

Endpoint security

Vulnerability management

Identity security

Network security

Incident response

Microsoft 365 security

Azure security

Entra ID security

Tools

CrowdStrike

Zscaler

Zero Trust

Job description

McGregor Boyall in London seeks a Senior IT Security Analyst/Engineer to join the global cyber security team. You will own selected security domains end-to-end and drive practical improvements to reduce cyber risk.

Responsibilities include threat detection with EDR tools (CrowdStrike), secure web gateway implementations (Zscaler), vulnerability assessments, and developing small automation dashboards to improve operations.