Senior Global Security Operations Centre Analyst - Windsor

Centrica - CHP; Windsor; Hybrid; GBP 60,000 - 100,000; Full time

Benefits offered by this job

Market salary

Growth opportunities

15% Employee Energy Allowance

Pension plan

Fully funded healthcare

25 days holiday + public holidays

Option to purchase extra days

Flexible benefits

Job summary

Centrica, a UK-based energy company, is seeking a Senior GSOC Analyst to lead complex cyber investigations from our Global Security Operations Centre in a hybrid model with occasional site travel in the UK.

You will oversee incident response across cloud, identity, endpoint, and network environments, mentor analysts, and drive improvements in detections and playbooks while aligning with business priorities.

Qualifications

• Proven SOC/ cyber defence experience with leading investigations and act as escalation point.
• Strong analytical and problem-solving skills, able to assess risk under pressure.
• Hands-on with Microsoft Sentinel, Defender, SIEM and EDR; strong monitoring, detection and response knowledge.
• Knowledge of modern tech environments: Microsoft Azure, AWS, SaaS, identity services and infra.
• Excellent communication and stakeholder management; able to explain findings to technical and non-technical audiences.

Responsibilities

• Lead complex cyber security investigations across the business; act as primary technical escalation within GSOC; support IR before CSIRT when needed.
• Investigate and respond to threats across cloud, endpoint, identity, email, network, and OT environments; assess impact and drive response actions.
• Manage incidents through lifecycle: containment, remediation, recovery, post-incident reviews; balance cyber risk with business priorities.
• Hunt for threats; collaborate with Threat Intelligence and Detection Engineering to improve detections and visibility.
• Develop detection rules, analytics, use cases, and response playbooks to improve security operations.
• Mentor Security Analysts; provide guidance and oversee complex investigations.
• Collaborate with Cyber Defence, Technology and business teams to drive operational excellence, support automation/AI security operations, and participate in the GSOC on-call rota.

Skills

Leadership in cyber investigations

Analytical thinking

Threat hunting

Communication

Mentoring

Proactive mindset

Tools

Microsoft Sentinel

Microsoft Defender

SIEM

EDR

Azure

AWS

MITRE ATT&CK

Job description

Salary: £60,000 - 100,000 per year

Requirements

• Proven experience in a Security Operations Centre (SOC), Cyber Defence, Threat Hunting, Incident Response, or a similar cyber security function, including leading complex investigations and serving as a technical escalation point.
• Strong analytical and problem-solving skills, with the ability to assess risk, make informed decisions, and remain composed during high-pressure cyber incidents.
• Hands-on experience with Microsoft Sentinel, Microsoft Defender, SIEM, and EDR technologies, and a strong understanding of security monitoring, detection, and response.
• Good knowledge of modern technology environments, including Microsoft Azure, AWS, SaaS platforms, identity services, and enterprise infrastructure, as well as attacker methodologies and frameworks such as MITRE ATT&CK.
• Excellent communication and stakeholder management skills, including the ability to explain technical findings clearly to technical and business audiences.
• Experience coaching, mentoring, and supporting the development of other analysts, with a collaborative approach to knowledge sharing and team success.
• A proactive, curious mindset and a passion for continuous improvement, threat hunting, automation, AI-assisted security operations, and emerging cyber threats.

Responsibilities

• Lead complex cyber security investigations across our business, acting as the primary technical escalation point within our Global Security Operations Centre (GSOC) and supporting incident response before escalation to CSIRT where required.
• Investigate and respond to threats across cloud, endpoint, identity, email, network, and Operational Technology (OT) environments, assessing impact and driving effective response actions.
• Manage incidents throughout their lifecycle, coordinating containment, remediation, recovery, and post-incident reviews while balancing cyber risk and business priorities.
• Hunt proactively for threats and work with our Threat Intelligence and Detection Engineering teams to identify emerging risks, improve detections, and strengthen security visibility.
• Develop and enhance detection rules, analytics, use cases, and response playbooks to continually improve our security operations.
• Mentor and support our Security Analysts by providing technical guidance, sharing knowledge, and overseeing complex investigations.
• Collaborate with our Cyber Defence, Technology, and business teams to drive operational excellence, support automation and AI-assisted security operations, produce clear incident reports, and participate in the GSOC on-call rota.

Technologies

• AI
• AWS
• Azure
• Cloud
• Support
• Network
• Security

More

We are Centrica, a family of brands working to revolutionise how we power the planet. Our 21,000 colleagues are helping create a greener, fairer future through an energy system that does not rely on fossil fuels, while supporting positive change in our communities. We make, store, move, sell, and mend energy. This is a UK-based hybrid role with occasional travel to site as a Senior Global Security Operations Centre Analyst. Our GSOC protects our business from evolving cyber threats, and this role will help strengthen our cyber defences and shape the future of security operations.

• We offer a market salary
• growth opportunities
• a 15% Employee Energy Allowance
• a comprehensive pension plan
• fully funded company healthcare
• 25 days of holiday plus public holidays
• the option to purchase up to five additional days
• flexible benefits including technology offers, eco-friendly car leases, and travel insurance

Our total rewards are designed to give our people flexibility and support their financial, physical, and emotional well-being, as well as that of their families. We value sustainability, inclusion, personal growth, and giving everyone a voice.

last updated 40 week of 2026