About ENSEK
ENSEK builds the cloud‑native SaaS software that’s transforming how energy retailers operate, innovate and manage at scale.
We help retailers lower operating costs, improve billing accuracy for consumers, and enhance customer experience through automation and AI‑driven insight, all underpinned by modern, cloud‑native architecture.
ENSEK is at an exciting inflection point as we scale at pace towards new international horizons. If you’re driven by solving complex, real‑world problems and want to build modern technology that accelerates the global energy transition, you’ll feel right at home with us.
About the role
As a Senior Cyber Security Analyst, you'll act as a technical authority within Security Operations, owning the design, development and continuous improvement of our detection and response capabilities.
You'll lead the response to major security incidents, drive threat-informed detection engineering, influence security architecture decisions, and work closely with colleagues across Security, Engineering and Platform teams to ensure ENSEK remains resilient against evolving threats.
This role combines hands-on technical expertise with leadership responsibilities, offering the opportunity to mentor junior analysts while contributing to strategic security initiatives across the business.
Key responsibilities:
Lead Security Incident Response by managing high-severity security incidents end-to-end, coordinating containment and recovery activities, conducting post-incident reviews, and acting as the senior technical lead during P1/P2 events.
Own Detection & Response Capability through the design, development and optimisation of SIEM detections, maintaining MITRE ATT&CK coverage, improving detection effectiveness, and identifying gaps across ENSEK's security monitoring landscape.
Drive Threat-Informed Security Operations by partnering with Threat & Vulnerability teams to operationalise threat intelligence, support vulnerability management activities, and ensure security operations remain aligned to ENSEK's evolving threat profile.
Enhance Security Automation & Operational Efficiency through the development of playbooks, automated response workflows, alert enrichment capabilities, and tool integrations that reduce analyst effort and improve response times.
Provide Security Leadership & Assurance by acting as the primary escalation point for Security Operations, mentoring analysts, supporting threat modelling activities, and providing security input into architectural and engineering decisions.
Deliver Security Reporting & Compliance Support by owning operational metrics and performance reporting, communicating risk to stakeholders, and contributing evidence and control monitoring activities supporting ISO 27001, SOC 2 and NIS2 compliance requirements.
Key outcomes:
Maintain an effective detection and response capability, continuously improving SIEM coverage, reducing false positives, and identifying gaps through MITRE ATT&CK aligned monitoring.
Lead the successful resolution of security incidents, ensuring timely containment, clear stakeholder communication, thorough post-incident reviews, and implementation of lessons learned.
Strengthen ENSEK's security posture by operationalising threat intelligence, supporting vulnerability remediation activities, and proactively identifying emerging risks.
Improve operational efficiency through the development of security automation, response playbooks and workflow enhancements that reduce manual effort and accelerate investigation and response times.
Increase security maturity across the organisation by providing security assurance to projects, supporting threat modelling activities, and embedding security monitoring requirements into new services and platforms.
Contribute to a high-performing Security Operations function by mentoring analysts, delivering meaningful operational reporting, and supporting compliance obligations including ISO 27001, SOC 2 and NIS2.
Experience required:
Proven experience operating within a Security Operations, Cyber Security Analyst, Security Engineer or Incident Response role, with responsibility for leading complex security investigations and major incident response activities.
Strong hands-on experience with SIEM platforms, including detection engineering, alert tuning, correlation rule development, coverage mapping, and the continuous improvement of monitoring capabilities.
Demonstrable experience leading security incidents from initial triage through to containment, recovery and post-incident review, including stakeholder management during high-severity events.
Practical experience applying the MITRE ATT&CK framework to detection engineering, threat hunting, investigations, threat modelling, or security control assessment.
Experience developing or supporting security automation and orchestration workflows, including the creation of playbooks, automated response actions, and integrations between security tools.
Experience working with cloud security technologies, endpoint detection and response (EDR/MDR) solutions, threat intelligence, and vulnerability management processes within a modern technology environment.
Strong communication skills with the ability to translate technical security risks, threats and vulnerabilities into clear, business-focused recommendations for both technical and non-technical stakeholders.
Experience mentoring, coaching or providing technical leadership to junior analysts, helping to develop team capability through knowledge sharing, documentation and continuous improvement initiatives.
Company Benefits
25 days’ holiday + bank holidays
Option to buy or sell 5 extra annual leave days per year
Vitality Health Insurance, including private healthcare, virtual GP access, mental‑health support and wellbeing perks (50% off gym memberships-Virgin Active, Nuffield, PureGym)
Pensionwith5% matched contribution
Regular team‑wide and company‑wide events
2 volunteering days per year to give back
Remote‑first working environment with offices in London and Nottingham
Originally posted on