Do you want to help power your career and be part of an evolving energy industry?
An exciting opportunity has arisen for a Senior Cyber Security Analyst to join our Digital & Innovation team.
The energy industry is advancing with investment in smart technology innovation and Northern Powergrid, as the company responsible for powering everyday life for 8 million customers across 3.9 million homes and businesses in the North East, Yorkshire and northern Lincolnshire, is at the forefront of delivering a power network that meets the region’s needs now and in the future.
As a member of the Berkshire Hathaway Energy Global Security Operations Centre (GSOC), the Senior Cyber Security Analyst will take a lead role in the 24×7×365 security monitoring of Northern Powergrid information systems, while supporting and continuously improving our cyber protection, detection and response infrastructure.
Along with a competitive salary of between £55,000 – £65,000 we also offer great benefits such as:
Enrolment into our pension scheme;
25 days holiday;
15% Performance Bonus.
The successful candidate will be subject to SC-level National Security Vetting. Candidates will be required to have lawfully resided in the UK for a minimum of 5 years to support security clearance processes.
Key Responsibilities
- Lead response to complex/high-severity incidents, acting as technical authority for investigation and recovery.
- Direct incident response, stakeholder engagement and post-incident reviews.
- Perform deep forensic and threat analysis across endpoint, network and cloud.
- Lead threat hunting and identification of advanced adversary activity.
- Design and optimise detection use cases aligned to threat intelligence (e.g. MITRE ATT&CK).
- Drive continuous improvement of SOC detection, response and automation (e.g. SOAR).
- Provide technical leadership and mentoring to L1/L2 analysts.
- Oversee endpoint, firewall and network security controls, including complex rule and policy design.
- Ensure incident handling meets audit and regulatory standards (NIS/CAF).
- Support cyber exercises, red/purple teaming and SOC strategy development.
Key Competencies
- Previous experience within an advanced Security Analyst or SOC Analyst role including incident response.
- Experience with SIEM technologies (e.g., QRadar, XSOAR).
- Strong problem‑solving and technical troubleshooting skills including threat hunting
- Advanced understanding of information security fundamentals.
- Ability to prioritise a constantly changing workload.
- Effective communicator able to guide and support less experienced analysts.
Skills, Knowledge & Qualifications
Essential Qualifications and Experience
- NPg form part of the critical national infrastructure, for this reason all applicants will require security clearance that requires the candidate to have lawfully resided in the UK for at least 5 years.
- 3–5+ years working in information security, SOC operations, incident response, or threat detection roles. Hands on experience in Security Operations or SOC environments.
- High level understanding of IT and operating systems (Microsoft and Linux).
- Experience coaching or leading junior team members is advantageous.
- Demonstrated experience with SIEM tools, network security, and incident response processes.
- Ability in alert triage, threat analysis, log analysis, and vulnerability management.
- Understanding of networking protocols, cloud security, and common attack techniques.
- Minimum of RFQ Level 5 (HNC) in Cyber Security, Computer Science, Information
- Security, or similar technical discipline. Or extensive professional experience
- CompTIA Security+, CySA+, or CEH
- SIEM focused certifications (e.g., Splunk, Microsoft Sentinel, QRadar)
Desirable Qualifications and Experience
- Experience in threat hunting, forensic analysis, or malware analysis.
- Familiarity with cloud environments (AWS/Azure) and their security models.
- Experience improving SOC processes, tuning detection rules, or leading incident response.
- Knowledge of compliance frameworks (e.g., NIST, ISO 27001).
- CISSP, GCIH, GCIA, GMON, GIAC certifications
- RFQ Level 6 (degree) in Cyber Security or Information Assurance
Additional Information
Posted: 27/07/26
Closing date for applications: 10/08/26
Hours: 37 hours per week, Shared Cover Monday – Friday between 08:00 and 18:00
Location: Sunderland