Cyber Security Incident Response Analyst

Join us, be part of more. We’re so much more than an energy company. We’re a family of brands revolutionising how we power the planet. We're energisers. One team of 21,000 colleagues that's energising a greener, fairer future by creating an energy system that doesn’t rely on fossil fuels, whilst living our powerful commitment to igniting positive change in our communities.

Here, you can find more purpose, more passion, and more potential. That’s why working here is #MoreThanACareer. We do energy differently - we do it all. We make it, store it, move it, sell it, and mend it. An opportunity to play your part - Ready to be on the frontline of cyber defence?

At Centrica, we're looking for a talented Cyber Security Incident Response Analyst to join our Cyber Security Incident Response Team (CSIRT). In this role, you'll investigate and respond to cyber security incidents across a diverse technology landscape, from cloud platforms and identity services to networks, endpoints and modern engineering environments.

Working alongside a team of security experts, you'll play a key role in protecting our business, driving continuous improvement, and helping us stay one step ahead of emerging threats in a fast-paced and ever-evolving cyber landscape. Location : UK-based hybrid role, Occasional travel to site.

Day to day Lead and support cyber security incident investigations across Centrica, analysing and responding to threats ranging from phishing and credential compromise to ransomware, data loss and complex security events. Manage incidents throughout the full response lifecycle, coordinating containment, eradication, recovery and post-incident activities while ensuring stakeholders remain informed and aligned.

Conduct technical investigations using SIEM, EDR, cloud, identity, email and network security tools to determine scope, impact and root cause across enterprise and cloud environments. Support forensic investigations and evidence handling activities, ensuring robust documentation, evidence preservation and clear reporting for technical, legal and governance purposes.

Investigate threats across modern technology platforms, including AWS, Azure, SaaS applications, code repositories, CI/CD pipelines and Operational Technology (OT) environments, working closely with engineering and technology teams. Drive continuous improvement by contributing to incident response playbooks, tabletop exercises, detection enhancements and lessons learned activities, helping Centrica stay one step ahead of emerging cyber threats.

What are the must haves Proven experience in Cyber Security Operations, Incident Response, Threat Hunting, Digital Forensics or Cloud Security, with a strong understanding of the end-to-end incident response lifecycle. Strong analytical and investigative skills, with the ability to correlate logs and security data from multiple sources using SIEM, EDR and identity platforms to quickly identify threats and assess impact.

Knowledge of forensic principles, evidence handling and defensible investigation practices, ensuring incidents are documented clearly and accurately from start to finish. Good understanding of modern technology environments, including cloud platforms, SaaS applications, identity services, GitHub and code repositories, alongside awareness of evolving cyber threats and attacker techniques.

Excellent communication and stakeholder management skills, able to translate technical findings into clear, actionable updates for both technical and non-technical audiences while collaborating across multiple teams. A naturally curious, calm and resilient approach, with sound judgement, strong integrity and a passion for continuous improvement, helping us strengthen our cyber defences and stay ahead of emerging threats.

What's in it for you? Enjoy a generous market salary, along with fantastic growth opportunities and a vibrant work environment! Power up your pay with a 15% Employee Energy Allowance, surpassing the government's price cap! Secure your future with our comprehensive pension plan, designed for peace of mind.

Elevate your health with our fully-funded company healthcare plan, prioritizing your well-being. Recharge with a generous 25-day holiday allowance, plus public holidays, and even purchase up to 5 extra days for extended relaxation! Experience unparalleled work-life balance with an exceptional selection of flexible benefits, from tech treats and eco-friendly car leases to travel insurance for your adventures!

Why should you apply? We’re not a perfect place – but we’re a people place. Our priority is supporting all of the different realities our people face. Life is about so much more than work. We get it. That’s why we’ve designed our total rewards to give you the flexibility to choose what you need, when you need it, making sure that you and your family are supported not only financially, but physically and emotionally too.

Visit the link below to discover why we’re a great place to work and what being part of more means for you. https://www.morethanacareer.energy/centrica If you're full of energy, fired up about sustainability, and ready to craft not only a better tomorrow, but a better you, then come and find your purpose in a team where your voice matters, your growth is non-negotiable, and your ambitions are our priority.

Help us, help you. We would love for you to share any information about yourself throughout our recruitment process so that we can better understand you and help shape your journey.