Snr IT Security Analyst / Engineer

McGregor Boyall; Greater London; On-site; GBP 70,000 - 83,000; Full time

Job summary

London-based financial trading company is seeking a Senior IT Security Analyst/Engineer to join the global cyber security team. The role combines analyst and engineering responsibilities across security tools, vulnerability management, web and email security, incident response, and threat-informed remediation.

You will work with infrastructure, cloud, application, identity and business teams to identify security issues, prioritise actions based on attacker behavior, and deliver measurable

Qualifications

• Senior technical contributor within the global cyber security team.
• Experience with Microsoft 365 / Azure security controls.
• Ability to prioritise mitigations using MITRE ATT&CK.

Responsibilities

• Owns or contributes to cyber security domains end-to-end.
• Drives practical improvements to reduce cyber risk.
• Administers and improves security tooling used for endpoint, web and email security.

Skills

Endpoint security

Vulnerability management

Identity security

Network security

Incident response

Threat-informed remediation

Tools

CrowdStrike

Zscaler ZIA

Zscaler ZPA

BeyondTrust EPM

PingCastle

BloodHound Enterprise

Job description

London, £70 – 82,500 + Financial Benefits + Bonus

Snr IT Security Analyst / Engineer

is required for this medium sized financial trading company, to act as a senior technical contributor within the global cyber security team, owning selected cyber security domains end-to-end and driving practical improvements to reduce cyber risk.

Owned or materially contributed to one or more cyber security domains, such as endpoint security, vulnerability management, identity security, network security, incident response or Microsoft 365 / Azure security.

Used CrowdStrike or equivalent EDR tooling to investigate detections, support incident response and improve endpoint security controls.

Used Zscaler ZIA / ZPA or equivalent secure web gateway, private access, zero trust or network access security technologies.

Performed vulnerability assessment, exposure analysis or remediation prioritisation across enterprise technology environments.

Applied threat intelligence, MITRE ATT&CK or exploitation-based evidence to prioritise mitigations.

Supported or led cyber security investigations and incident response activities.

The role combines analyst and engineering responsibilities across security tools, vulnerability and exposure management, web and email security, incident response, and threat-informed remediation.

The role works closely with infrastructure, cloud, application, identity and business teams to identify security issues, prioritise actions based on real-world attacker behaviour, and deliver measurable improvements to cyber defence posture.

To support cloud security by advising on, reviewing and improving Microsoft Azure and 365 security controls.

Administer, configure and continuously improve cyber security tools, including CrowdStrike, Zscaler ZIA / ZPA, and BeyondTrust Endpoint Privilege Management (EPM).

Improve security tooling effectiveness by tuning configurations, reducing noise, improving visibility and increasing operational value.

Design, build and deploy small tools, scripts, dashboards or automations to improve operations.

Support integration of tooling into workflows, reporting and incident response processes.

Maintain practical knowledge of Microsoft 365, Azure / Entra ID and Microsoft security controls, supporting improvements with the primary platform owners.

Use automation and AI-enabled workflows responsibly to accelerate analysis, documentation, query development and repetitive operational tasks.

Support vulnerability management by analysing weaknesses, validating risk, prioritising remediation and tracking material issues to closure.

Apply threat intelligence, exploitation evidence, asset criticality and business context to prioritise remediation activity.

Identify and manage exposure risks across endpoints, identity, SaaS, remote access and cloud-adjacent environments.

Support attack path reduction activity across Active Directory, Entra ID and privileged access pathways.

Use tools such as PingCastle and BloodHound Enterprise to identify identity-related weaknesses and drive remediation with infrastructure and identity teams.

Advise technical teams on secure configuration and hardening improvements, including Active Directory, GPO, Microsoft 365, Azure Policy and identity controls.