Cybersecurity Analyst

About This Role

This role is for a hands-on Cybersecurity Analyst to join the Cloud Infrastructure & Information Security team, focusing on the day-to-day security operations of the company's Microsoft-native estate. The analyst will act as a technical bridge between the in-house team and the managed Security Operations Centre (SOC), with significant independence to lead incidents, tune detections, and gather evidence for auditors and regulators.

Responsibilities

• Act as first point of escalation from the managed SOC, leading investigation, containment and root-cause analysis for Defender XDR and Sentinel incidents
• Develop and tune detections and KQL queries, and run threat hunts mapped to MITRE ATT&CK
• Harden the Microsoft environment across Entra ID, Intune, Defender for Endpoint and Azure, and own the vulnerability management lifecycle
• Administer email, web and data security controls, and run the phishing simulation and awareness programme
• Produce audit evidence and monthly security metrics for ISO 27001, FCA and DORA obligations, and support due diligence on vendors and portfolio companies
• Hold the managed SOC to account and contribute to the security roadmap

Requirements

• Around 3 years' hands-on experience in a SOC, security operations or security engineering role
• Strong practical experience with Defender XDR, Sentinel, Entra ID and Intune
• Demonstrable incident response experience
• Experience working with or alongside a managed SOC or MSSP
• Clear, concise written communication, from incident reports to management-ready metrics

Nice to have:

• KQL and MITRE ATT&CK knowledge
• Microsoft SC-200, SC-100 or AZ-500 certification
• Experience in financial services or another regulated environment, and familiarity with ISO 27001, FCA or DORA
• Exposure to email and web security platforms such as Mimecast, Egress or Zscaler
• Scripting or automation experience (PowerShell, Python, Logic Apps)
• Experience supporting penetration test remediation or purple-team exercises

About the Company

Hayfin protects its investors, partners, and reputation through robust security measures.