Senior Cyber Security & SIEM Lead (Hybrid)

interactive investor; Manchester; Hybrid; GBP 49,000 - 59,000; Full time

Benefits offered by this job

Group Pension Plan – 8% employer

Life Assurance

Private Medical Insurance – Bupa

25 Days Annual Leave + bank holidays

Staff Discounts on investments

Personal & Well-being Fund

Retail Discounts

Voluntary Flexible Benefits

Job summary

interactive investor is seeking a Senior Security Operations Analyst to join the Information Security Team. You will monitor, detect, analyse and respond to security incidents, oversee the SIEM (Chronicle) operations and work with SOC partners.

The role requires strong knowledge of SIEM tooling and incident response, plus experience with threat intelligence and cloud-related security concepts. The position is hybrid, based in Manchester or Leeds with 3 days on-site and 2 days remote, offering

Qualifications

• Experience with SIEM tools (Splunk/Chronicle/Sentinel).
• Experience in detecting, investigating and responding to security incidents.
• Experience in threat intelligence and threat hunting activities.
• Knowledge of Windows event logs and network security fundamentals.

Responsibilities

• Oversee daily SIEM operations and collaborate with SOC.
• Define and tune SIEM rules for Chronicle/Splunk.
• Investigate and respond to security incidents end-to-end.
• Monitor threat intelligence and coordinate threat hunting activities.
• Design, implement and document security policies and controls.
• Manage Endpoint Detection and Response (EDR).
• Assess threats from multiple sources and plan mitigations.

Skills

SIEM monitoring

Incident response

Threat hunting

Threat intelligence

EDR management

Firewall/IDS knowledge

Windows Security Logs

Strong communication

Education

Degree in IT / Cyber

Tools

Splunk

Chronicle

Microsoft Sentinel

Job description

interactive investor is seeking a Senior Security Operations Analyst to join the Information Security Team. You will monitor, detect, analyse and respond to security incidents, oversee the SIEM (Chronicle) operations and work with SOC partners.

The role requires strong knowledge of SIEM tooling and incident response, plus experience with threat intelligence and cloud-related security concepts. The position is hybrid, based in Manchester or Leeds with 3 days on-site and 2 days remote, offering