Cybersecurity Analyst

We are growing our Cloud Infrastructure & Information Security team, and we are looking for a hands-on Cybersecurity Analyst to help us raise the bar. Security sits at the heart of how Hayfin protects its investors, its partners and its reputation.

The Role

You will own the day-to-day security operations of our Microsoft-native estate and act as the technical bridge between our in-house team and our managed Security Operations Centre (SOC). It is a role with real independence: you might lead an incident from first escalation to root-cause review, tune a Defender XDR detection after a threat hunt, or pull together the evidence that satisfies our ISO 27001 auditors and regulators.

You will work closely with the Director of Cloud Infrastructure & Information Security, our engineers, Compliance and Risk, and our external partners. Hayfin is a place where good ideas get heard, and you will have the room to shape the security roadmap and automate the routine so the team can focus on what matters.

Responsibilities

• Acting as first point of escalation from the managed SOC, leading investigation, containment and root-cause analysis for Defender XDR and Sentinel incidents
• Developing and tuning detections and KQL queries, and running threat hunts mapped to MITRE ATT&CK
• Hardening our Microsoft environment across Entra ID, Intune, Defender for Endpoint and Azure, and owning the vulnerability management lifecycle
• Administering our email, web and data security controls, and running the phishing simulation and awareness programme
• Producing audit evidence and monthly security metrics for ISO 27001, FCA and DORA obligations, and supporting due diligence on vendors and portfolio companies
• Holding the managed SOC to account and contributing to the security roadmap