Cyber Security Analyst

Cyber Security Analyst - 12 months - £550 - 700 per day - Inside IR35

Private Equity/Investment Management

Candidates will previously have worked within Financial Services/PE or Investment Management.

The successful candidate will join at a particularly interesting time, with a number of strategic security initiatives underway, including the adoption of passwordless authentication, AI-assisted code auditing, enhanced attack surface monitoring, and improvements to security monitoring and behavioural analytics.

Responsibilities:

• Drive triage and remediation governance for the AI-assisted code audit of Deal Management and Fund Management proprietary products
• Support rollout of FIDO2/WebAuthn across all privileged accounts with access to proprietary systems, and Entra admin roles
• Assist with the 3rd-party trust boundary review, access scoping, developer workstation standards, signed commits, and SBOM requirements including tracking contractual dependencies with Legal/Procurement
• Maintain and improve the emergency patching runbook for critical CVEs (CVSS 9.0+), ensuring patch SLAs are measured in hours rather thandays
• Support User and Entity Behaviour Analytics (UEBA) and SIEM uplift, building detection logic around normal deal workflow behavioural baselines

Skills/Experience

• Security operations or threat analysis background, ideally in financial services or a regulated environment
• Hands-on experience with SIEM/UEBA, EDR, and identity tooling (Entra, Conditional Access, FIDO2/WebAuthn)
• Familiarity with application security vulnerability classes: deserialisation, IDOR, injection, authorisationlogic
• Working knowledge of supply chain security practices: SBOMs, SCA, dependency management
• Understanding of DORA ICT risk obligations desirable (Arts. 9, 10, 28 particularly relevant to this role)
• Comfortable operating with ambiguity in a fast-moving, small-team environment