Senior Cybersecurity Operations Analyst

About the role

DEFEND is seeking a Senior Cybersecurity Operations Analyst to lead vulnerability management, threat hunting, and incident response for critical customer environments. You will translate complex risks into actionable security measures and work closely with stakeholders to reduce exposure.

Key responsibilities

• Own end‑to‑end vulnerability management across infrastructure, endpoints, and applications.
• Identify, prioritise, and communicate risk from routine exposures to zero‑day threats.
• Conduct proactive threat hunting using KQL and CQL.
• Investigate and respond to security incidents across identity, endpoint, and network layers.
• Automate security operations with Python, PowerShell, Bash, or emerging AI techniques.
• Partner with stakeholders to drive remediation and risk reduction.
• Deliver high‑quality reporting and insights for decision‑making.
• Contribute to cloud security posture and hardening initiatives.
• Continuously improve playbooks, processes, and detection capabilities.

Required profile

• Experience with vulnerability management platforms such as Qualys or CrowdStrike.
• Strong grasp of risk prioritisation frameworks.
• Hands‑on threat hunting and security operations expertise.
• Proficiency with SIEM, EDR, and modern security tooling.
• Solid scripting/automation skills (Python, PowerShell, Bash, or AI).
• Excellent communicator who can translate technical risk into business impact.
• Curious, ownership‑driven mindset focused on continuous improvement.

Required skills

• Qualys
• CrowdStrike
• KQL
• CQL
• SIEM
• EDR
• Python
• PowerShell
• Bash
• AI‑based automation

What we offer

• Opportunity to deepen expertise in large‑scale risk and vulnerability management.
• Clear pathways to senior engineering or leadership roles.
• Culture built on understanding, partnership, ownership, guardianship, and excellence.
• Collaborative workplace with focus on growth, innovation, and inclusive environment.