Snr IT Security Analyst/Engineer

McGregor Boyall; Greater London; On-site; GBP 70,000 - 83,000; Full time

Job summary

McGregor Boyall in London seeks a Senior IT Security Analyst/Engineer to join the global cyber security team. You will own selected security domains end-to-end and drive practical improvements to reduce cyber risk.

Responsibilities include threat detection with EDR tools (CrowdStrike), secure web gateway implementations (Zscaler), vulnerability assessments, and developing small automation dashboards to improve operations.

Qualifications

• Experience owning cyber security domains end-to-end.
• Experience in vulnerability assessment and remediation prioritisation.
• Experience in incident response investigations and tooling.
• Ability to design and deploy small tools, scripts or dashboards.
• Strong knowledge of Microsoft 365, Azure/Entra ID security controls.

Responsibilities

• Own or materially contribute to cyber security domains within the enterprise.
• Investigate detections with EDR tooling (CrowdStrike) and support incident response.
• Implement secure web gateway solutions (Zscaler) and zero-trust controls.
• Perform vulnerability assessments and prioritise mitigations.
• Apply MITRE ATT&CK to guide security improvements.
• Lead or support cyber security investigations and incident response.
• Develop tools or dashboards to automate security operations.
• Integrate tooling into workflows and incident reporting.
• Keep up-to-date with Microsoft 365, Azure/Entra ID security controls.

Skills

Endpoint security

Vulnerability management

Identity security

Network security

Incident response

Microsoft 365 security

Azure security

Entra ID security

Tools

CrowdStrike

Zscaler

Zero Trust

Job description

Snr IT Security Analyst/Engineer
London, £70 - 82,500 + Financial Benefits + Bonus

Snr IT Security Analyst/Engineer is required for this medium sized financial trading company, to act as a senior technical contributor within the global cyber security team, owning selected cyber security domains end-to-end and driving practical improvements to reduce cyber risk.

• Owned or materially contributed to one or more cyber security domains, such as endpoint security, vulnerability management, identity security, network security, incident response or Microsoft 365/Azure security.


• Used CrowdStrike or equivalent EDR tooling to investigate detections, support incident response and improve endpoint security controls.


• Used Zscaler ZIA/ZPA or equivalent secure web gateway, private access, zero trust or network access security technologies.


• Performed vulnerability assessment, exposure analysis or remediation prioritisation across enterprise technology environments.


• Applied threat intelligence, MITRE ATT&CK or exploitation-based evidence to prioritise mitigations.


• Supported or led cyber security investigations and incident response activities.


• Design, build and deploy small tools, scripts, dashboards or automations to improve operations.


• Support integration of tooling into workflows, reporting and incident response processes.


• Maintain practical knowledge of Microsoft 365, Azure/Entra ID and Microsoft security controls, supporting improvements with the primary platform owners.


• Use automation and AI-enabled workflows responsibly to accelerate analysis, documentation, query development and repetitive operational tasks.