Senior Global Security Operations Centre Analyst

Centrica plc; United Kingdom; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

15% Energy Allowance

Company pension

Fully funded healthcare

25 days holiday + 5 extra days

Flexible benefits

Job summary

Centrica plc is seeking a Senior Global Security Operations Centre Analyst to lead complex cyber investigations and act as the technical escalation point within GSOC, coordinating responses across cloud, endpoint, identity, email, network and OT environments.

You will develop detections, playbooks and automation while mentoring junior analysts and partnering with Threat Intelligence teams to stay ahead of threats. Hybrid UK-based role with occasional travel.

Qualifications

• Experience leading complex investigations in a SOC or similar cyber security function.
• Strong analytical and risk assessment skills for high-pressure incidents.
• Hands-on with SIEM/EDR and cloud security (Azure/AWS) monitoring.
• Excellent communicator with stakeholder management skills.

Responsibilities

• Lead complex cyber security investigations across Centrica's environment, acting as the primary technical escalation point within the GSOC and supporting incident response.
• Investigate and respond to threats across cloud, endpoint, identity, email, network and OT environments, assessing impact and driving effective response actions.
• Manage incidents through the full lifecycle: containment, remediation, recovery and post-incident reviews while balancing cyber risk and business priorities.
• Proactively hunt for threats and partner with Threat Intelligence and Detection Engineering teams to identify emerging risks and improve detections.
• Develop and enhance detection rules, analytics, use cases and response playbooks to continuously improve security operations.
• Mentor Security Analysts with technical guidance and oversight during complex investigations.
• Collaborate with Cyber Defence, Technology and business teams to drive operational excellence, support automation and AI-assisted security operations.

Skills

SOC operations

Threat hunting

Incident response

Microsoft Sentinel

Microsoft Defender

SIEM/EDR

Azure

AWS

MITRE ATT&CK

Communication

Mentoring

Tools

Microsoft Defender for Endpoint

PowerShell

Azure AD

Job description

## Senior Global Security Operations Centre AnalystApply: Windsor: Full time: Posted Today: End Date: October 10, 2026 (11 days left to apply): R0088000**Join us, be part of more.**We’re so much more than an energy company. We’re a family of brands revolutionising how we power the planet. We're energisers. One team of 21,000 colleagues that's energising a greener, fairer future by creating an energy system that doesn’t rely on fossil fuels, whilst living our powerful commitment to igniting positive change in our communities. Here, you can find more purpose, more passion, and more potential. That’s why working here is #MoreThanACareer. We do energy differently - we do it all. We make it, store it, move it, sell it, and mend it.**An opportunity to play your part -** At Centrica, our Global Security Operations Centre (GSOC) is at the forefront of protecting our business from evolving cyber threats. As a Senior Global Security Operations Centre Analyst, you'll be the key technical escalation point between our Security Analyst team and the Cyber Security Incident Response Team (CSIRT), leading complex investigations and supporting the response to significant security incidents. Working across cloud, endpoint, identity, and network technologies, you'll play a critical role in strengthening our cyber defences while helping shape the future of security operations through threat hunting, automation, AI-assisted workflows, and continuous improvement. If you're passionate about cyber security, enjoy solving complexchallenges, and want to make a real impact, we'd love to hear from you.**Location**: UK-based hybrid role, Occasional travel to site.**Day to day -*** Lead complex cyber security investigations across Centrica, acting as the primary technical escalation point within the GSOC and supporting incident response before escalation to CSIRT where required.* Investigate and respond to threats across cloud, endpoint, identity, email, network and Operational Technology (OT) environments, assessing impact and driving effective response actions.* Manage incidents through the full lifecycle, coordinating containment, remediation, recovery and post-incident reviews while balancing cyber risk and business priorities.* Proactively hunt for threats and partner with Threat Intelligence and Detection Engineering teams to identify emerging risks, improve detections and strengthen security visibility.* Develop and enhance detection rules, analytics, use cases and response playbooks, helping continuously improve our security operations capability.* Mentor and support Security Analysts by providing technical guidance, knowledge sharing and oversight during complex investigations, helping the team grow and succeed.* Collaborate with Cyber Defence, Technology and business teams to drive operational excellence, support automation and AI-assisted security operations, produce clear incident reporting, and participate in the GSOC on-call rota.**What are the must haves*** Proven experience working within a Security Operations Centre (SOC), Cyber Defence, Threat Hunting, Incident Response or a similar cyber security function, with the ability to lead complex investigations and act as a technical escalation point.* Strong analytical and problem-solving skills, with the confidence to assess risk, make informed decisions and remain composed during high-pressure cyber incidents.* Hands-on experience with Microsoft Sentinel, Microsoft Defender, SIEM and EDR technologies, with a strong understanding of security monitoring, detection and response.* Good knowledge of modern technology environments, including Microsoft Azure, AWS, SaaS platforms, identity services and enterprise infrastructure, alongside an understanding of attacker methodologies and frameworks such as MITRE ATT&CK.* Excellent communication and stakeholder management skills, capable of translating technical findings into clear, meaningful updates for both technical and business audiences.* Experience coaching, mentoring and supporting the development of other analysts, with a collaborative approach to knowledge sharing and team success.* A proactive and curious mindset with a passion for continuous improvement, threat hunting, automation, AI-assisted security operations and staying ahead of emerging cyber threats.**What's in it for you?*** Enjoy a generous market salary, along with fantastic growth opportunities and a vibrant work environment!* Power up your pay with a 15% Employee Energy Allowance, surpassing the government's price cap!* Secure your future with our comprehensive pension plan, designed for peace of mind.* Elevate your health with our fully-funded company healthcare plan, prioritizing your well-being.* Recharge with a generous 25-day holiday allowance, plus public holidays, and even purchase up to 5 extra days for extended relaxation!* Experience unparalleled work-life balance with an exceptional selection of flexible benefits, from tech treats and eco-friendly car leases to travel insurance for your adventures!**Why should you apply?** We’re not a perfect place – but we’re a people place. Our priority is supporting all of the different realities our people face. Life is about so much more than work. We get it. That’s why we’ve designed our total rewards to give you the flexibility to choose what you need, when you need it, making sure that you and your family are supported not only financially, but physically and emotionally too. Visit the link below to discover why we’re a great place to work and what being part of more means for you. https://www.morethanacareer.energy/centricaIf you're full of energy, fired up about sustainability, and ready to craft not only a better tomorrow, but a better you, then come and find your purpose in a team where your voice matters, your growth is non-negotiable, and your ambitions are our priority.Help us, help you. We would love for you to share any information about yourself throughout our recruitment process so that we can better understand you and help shape your journey.