Senior Security Analyst

Square Enix; Greater London; On-site; GBP 75,000 - 110,000; Full time

Job summary

Square Enix is seeking a Senior Security Analyst to strengthen the Cyber Security team. You will detect security events, manage risk, and drive rapid, effective responses to protect games, systems and data.

Day‑to‑day, you’ll triage alerts, investigate incidents, and optimise tooling, while expanding automation and AI support across the security stack. Strong collaboration with stakeholders is essential to reduce risk and improve resilience.

Qualifications

• Experience in cyber security, security operations, risk, IT, or similar environments.
• Experience handling major cyber security incidents.
• Relevant certifications welcomed or equivalent practical experience.

Responsibilities

• Own and continuously improve vulnerability management with automation and AI support.
• Drive exposure management, prioritisation and remediation tracking by risk.
• Monitor attack surface across cloud, on‑prem, and third‑party assets.
• Collaborate with system owners to remediate vulnerabilities promptly.
• Support risk analysis activities including third-party risk assessments.
• Design automation‑driven workflows and explore AI-assisted security tool features.
• Maintain and enhance security tooling to improve detection and response.
• Investigate security alerts and respond to incidents promptly.
• Coordinate with stakeholders during investigations and share insights.

Skills

Cyber security

Security operations

Incident response

Risk management

Automation & AI in security

Threat intelligence

Vulnerability/Exposure management

SOAR & SIEM

Structured log analysis

Communicating with stakeholders

Tools

SOAR

SIEM

Vulnerability management tools

Job description

Job Summary

The Senior Security Analyst role will work within our Cyber Security team to detect potential security events, manage risk and drive an effective response. The role offers the opportunity to help grow the Cyber Security team's capabilities, which are highly visible across the business and have a direct impact on protecting Square Enix's games, systems and data.

The Senior Security Analyst role will work within our Cyber Security team to detect potential security events, manage risk and drive an effective response. The role offers the opportunity to help grow the Cyber Security team's capabilities, which are highly visible across the business and have a direct impact on protecting Square Enix's games, systems and data.
Day to day, the Senior Security Analyst will be responsible for identifying, prioritising, and reducing organisational cyber risk through proactive exposure management, investigating alerts and responding to incidents. The role will be maintaining and optimising Cyber Security tooling as well as contributing towards the increased use of automation and AI. The role's analytical and risk skills will be applied across the whole Cyber Security team to ensure vulnerabilities and exposures are identified, prioritised by risk, and remediated efficiently and to assist with security improvements and risk management activities.
This role suits someone with broad cyber security experience who is looking to deepen their expertise and make a measurable impact in an exciting, fast-moving industry.

Roles, Responsibilities, And KPIs

• Own and continuously improve our Vulnerability Management process, including the use of automation and AI to support efficient triage, analysis and remediation.
• Drive Exposure Management initiatives including vulnerability discovery, prioritisation and remediation tracking, focusing on risk-based outcomes.
• Monitor internal and external attack surface exposure including cloud, on-prem, and third-party assets.
• Work closely with system owners to help them manage their vulnerabilities. Assist them in implementing any resolution actions in a risk focused and timely manner.
• Support the Security Risk Management function with risk analysis activities, including third party risk assessments.
• Design and implement automation-supported workflows and explore the practical use of AI-assisted features within security tools to improve efficiency and consistency.
• Maintain and enhance our tools and platforms to continuously improve our intelligence, detection and response capability.
• Perform in-depth investigation and analysis of security alerts to identify and promptly respond to security events.
• Collaborate with key stakeholders during investigations to gather further information and coordinate response actions.
• Derive value from relevant threat intelligence to drive proactive action.
• Influence the strategic direction of our team by presenting insight into the security events, alerts and incidents we handle.
• Maintain a broad understanding of IT/online environments and key company assets to enhance decision making and response to incidents.
• Support the detection of game specific abuses such as leaks, cheats, piracy, copyright abuse, player account compromise and rogue sites.

Performance Measures

• Mitigation time for Critical and High risk vulnerabilities
• Mean time for business recovery to C1 (Highest criticality) level security incidents
• Security event triage time
• Game/brand leak detection timeframes

Requirements

Experience and Qualifications

• Experience in cyber security, security operations, risk, IT, engineering, or similar environment, with exposure to security monitoring and response.
• Experience responding to or handling major cyber security incidents.
• Relevant Security Operations, Incident Response, or Risk Management certifications are welcomed (or equivalent practical experience).

Interpersonal and Technical Skills

• Effective communication skills with non-technical stakeholders and executives.
• Able to stay focused during incidents and work methodically with the support of the wider team.
• Curious about how automation and AI-assisted capabilities can support Cyber Security work and improve ways of working.
• Comfortable prioritising work, making sound risk-based recommendations, and knowing when to seek input or elevate.
• Familiarisation with common Incident Response frameworks such as NIST.
• Strong appreciation of attacker tactics, techniques and procedures.
• Occasional flexibility may be needed for urgent incidents; we aim to plan work sustainably.
• Knowledge and hands on experience withCyber Securitytools, such as Vulnerability/Exposure Management, SOAR and SIEM platforms.
• Able to query and analyse structured log data.

Purpose & Values

• Purpose: Creating New Worlds with Boundless Imagination to Enhance People's Lives
• Values:
  • Deliver Unforgettable Experiences
  • Embrace Challenges
  • Act Swiftly
  • Stronger Together
  • Continuously Evolve
  • Cultivate Integrity