Cybersecurity Analyst

Hayfin Capital Management LLP

. Act as the first point of escalation from the managed SOC, leading investigation, containment and root-cause analysis for Defender XDR and Sentinel incidents .

Posted 10/27/2026full-timeLondon • United KingdomMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in incident response, vulnerability management, and security operations within a Microsoft environment, with a strong focus on automation and compliance with ISO 27001 and financial regulations.

Highest-signal resume keywords

Defender XDRSentinelIncident ResponseVulnerability ManagementISO 27001

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

KQLMITRE ATT&CKScriptingAutomationSecurity Metrics

Soft Skills

Clear CommunicationTeam Collaboration

Tools & Technologies

Entra IDIntuneDefender for EndpointEmail Security PlatformsWeb Security Platforms

Certifications & Qualifications

Microsoft SC-200Microsoft SC-100Microsoft AZ-500

Industry Keywords

Financial ServicesRegulated EnvironmentFCADORA

Tech Stack

Tools & technologies

AzureCloudPython

About the role

Key responsibilities & impact

Act as the first point of escalation from the managed SOC, leading investigation, containment and root-cause analysis for Defender XDR and Sentinel incidents
Develop and tune detections and KQL queries, and run threat hunts mapped to MITRE ATT&CK
Harden the Microsoft environment across Entra ID, Intune, Defender for Endpoint and Azure, and own the vulnerability management lifecycle
Administer email, web and data security controls, and run the phishing simulation and awareness programme
Produce audit evidence and monthly security metrics for ISO 27001, FCA and DORA obligations
Support due diligence on vendors and portfolio companies
Hold the managed SOC to account and contribute to the security roadmap
Work closely with the Director of Cloud Infrastructure & Information Security, engineers, Compliance and Risk, and external partners
Automate routine security tasks and help shape the security roadmap

Requirements

What you’ll need

Around 3 years' hands-on experience in a SOC, security operations or security engineering role
Strong practical experience with Defender XDR, Sentinel, Entra ID and Intune
Demonstrable incident response experience
Experience working with or alongside a managed SOC or MSSP
Clear, concise written communication, from incident reports to management-ready metrics
KQL and MITRE ATT&CK knowledge (bonus)
Microsoft SC-200, SC-100 or AZ-500 certification (bonus)
Experience in financial services or another regulated environment, and familiarity with ISO 27001, FCA or DORA (bonus)
Exposure to email and web security platforms such as Mimecast, Egress or Zscaler (bonus)
Scripting or automation experience (PowerShell, Python, Logic Apps) (bonus)
Experience supporting penetration test remediation or purple-team exercises (bonus)