Cyber Security Analyst – Hybrid (London)

About the role

We are partnering with a leading private‑equity firm to recruit a Cyber Security Analyst for its London office. The role is hybrid, requiring three days on‑site each week, and offers the chance to work in a fast‑paced, highly regulated environment.

Key responsibilities

• Drive triage and remediation governance for AI‑assisted code audits of Deal Management and Fund Management products.
• Support rollout of FIDO2/WebAuthn for privileged accounts and Entra admin roles.
• Assist with third‑party trust‑boundary reviews.
• Maintain and enhance the emergency patching runbook for critical CVSS 9.0+ vulnerabilities.
• Contribute to micro‑segmentation of proprietary applications and deploy honeytokens for early‑warning threat detection.
• Run continuous External Attack Surface Management (EASM) and cross‑reference findings with the CMDB weekly.
• Support SIEM and UEBA enhancements, building detection logic around normal deal‑workflow behavioural baselines.

Required profile

• Previous experience in Security Operations, Cyber Security Analysis, or Threat Analysis.
• Background in financial services, private equity, or another regulated environment.
• Self‑motivated and able to operate independently in a rapidly evolving setting.

Required skills

• SIEM, UEBA and EDR platforms.
• Identity management technologies: Entra ID, Conditional Access, FIDO2/WebAuthn.
• Application security knowledge: deserialization, IDOR, injection, authorization logic flaws.
• Software supply‑chain security: SBOMs, Software Composition Analysis (SCA), dependency management.
• External Attack Surface Management (EASM) and CMDB familiarity.
• Micro‑segmentation and honeytoken deployment.

What we offer

• 12‑month contract with a competitive daily rate.
• Hybrid working model (3 days in office).
• Opportunity to influence cyber‑security controls across critical business platforms.