Since our establishment in 1990, Methods has partnered with a range of central government departments and agencies to transform the way the public sector operates in the UK. Our mission is to improve and safeguard public-facing services. We apply digital thinking to ensure the future of our public services is centered around our citizens. Our human touch sets us apart from other consultancies, system integrators and software houses - we have a customer-centric value system whereby we focus on delivering what is right for our clients. We passionately support our clients in the success of their projects while working collaboratively to share skill sets and solve problems. At Methods we have fun while working hard; we are not afraid of making mistakes and learning from them. Methods are experts in delivering secure, resilient cyber and information services – keeping systems and data safe. We help reduce risk and vulnerabilities from cyber-attacks by developing a security road-map tailored to your unique needs. We help organisations improve processes such as threat management by building an identity management programme, and establishing prevention, detection and response capabilities to cyber-attacks. Role Summary The Senior Cyber Analyst is the senior technical lead within the Cyber Services function, responsible for complex cyber investigations, incident response, threat detection, and security platform optimisation. Acting as the highest technical escalation point within cyber operations, the role provides leadership, mentoring, and strategic direction to ensure customers maintain a strong and resilient security posture. Incident Response & Threat Management Lead the investigation and resolution of complex cyber security incidents across endpoint, network, cloud, and identity platforms. Act as the senior escalation point for threat hunting, incident response, and security investigations. Conduct forensic analysis, identify attack patterns, and provide recommendations to reduce risk and improve resilience. Security Platforms & Service Improvement Own the technical effectiveness and continual improvement of Microsoft Sentinel, Microsoft Defender, SIEM, SOAR, EDR, and XDR capabilities. Develop and maintain detection rules, use cases, automation, and response playbooks to improve operational efficiency. Work with the Technical Architect to align security tooling, controls, and services with customer and organisational requirements. Technical Leadership & Governance Provide technical leadership, mentoring, and quality assurance across the Cyber Services team. Support security governance and compliance activities including ISO27001, Cyber Essentials Plus, and customer assurance requirements. Produce technical reports, post-incident reviews, threat intelligence briefings, and stakeholder communications. Collaborate with Service Delivery, Support, Projects, and Product teams to identify and address security risks and service improvements. Skills & Experience Essential Significant experience in a senior Cyber Security, SOC, Threat Detection, or Incident Response role. Strong hands-on experience investigating and responding to complex cyber security incidents. Deep technical knowledge of Microsoft security technologies including Sentinel, Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft 365 Security, and Entra ID. Experience designing, tuning, and optimising SIEM, SOAR, EDR, and XDR solutions. Strong understanding of threat hunting, attack techniques, threat intelligence, and vulnerability management. Ability to translate technical findings and cyber risk into clear business outcomes and recommendations. Experience mentoring technical teams and driving operational standards. Excellent documentation, analytical, and stakeholder management skills. Desirable Certifications such as SC-200, SC-300, CISSP, GCIH, GCIA, or equivalent. Knowledge of MITRE ATT&CK, NIST Cyber Security Framework, and Zero Trust principles. Experience with PowerShell, Python, or security automation technologies. Experience contributing to cyber service development, tooling strategy, or architectural design. Background in regulated or security-sensitive environments, including public sector, healthcare, local government, or financial services. This role will require you to have or be willing to go through Security Clearance. As part of the onboarding process candidates will be asked to complete a Baseline Personnel Security Standard; details of the evidence required to apply may be found on the government website Gov.UK. If you are unable to meet this and any associated criteria, then your employment may be delayed, or rejected . Details of this will be discussed with you at interview Methods is passionate about its people; we want our colleagues to develop the things they are good at and enjoy. By joining us you can expect Autonomy to develop and grow your skills and experience Be part of exciting project work that is making a difference in society Strong, inspiring and thought-provoking leadership A supportive and collaborative environment Development – access to LinkedIn Learning, a management development programme, and training Wellness – 24/7 confidential employee assistance programme Flexible Working – including home working and part time Social – office parties, breakfast Tuesdays, monthly pizza Thursdays, Thirsty Thursdays, and commitment to charitable causes Time Off – 25 days of annual leave a year, plus bank holidays, with the option to buy 10 extra days each year Volunteering – 2 paid days per year to volunteer in our local communities or within a charity organisation Pension – Salary Exchange Scheme with 4% employer contribution and 5% employee contribution Life Assurance – of 4 times base salary Private Medical Insurance – which is non-contributory (spouse and dependants included) Worldwide Travel Insurance – which is non-contributory (spouse and dependants included) Enhanced Maternity and Paternity Pay Travel – season ticket loan, cycle to work scheme For a full list of benefits please visit our website (www.methods.co.uk/careers/benefits)