Senior Security Analyst (AI Security)

Location: London, England — One Canada Square, Level 25

Company

hirify.global’s Technology Services function delivers enterprise infrastructure, applications, and end-user technology services across its business groups.

What you will do

• Investigate and resolve complex security alerts and incidents from Microsoft Sentinel, Microsoft Defender XDR, endpoint tools, and other monitoring platforms.
• Administer Zscaler Internet Access, Zscaler Private Access, Client Connector, Microsoft security platforms, identity controls, and email-security systems.
• Operate the vulnerability-management lifecycle, including validation, risk-based prioritization, remediation coordination, exceptions, dashboards, and reporting.
• Review AI applications and use cases, monitor shadow AI activity, and investigate AI-related risks such as sensitive-data disclosure, prompt injection, insecure integrations, and excessive permissions.
• Lead phishing simulations and security-awareness activities, and execute legal hold and eDiscovery requests in Microsoft Purview.
• Participate in a scheduled after-hours on-call rotation and provide timely support during critical security incidents and urgent vulnerability events.

Requirements

• Five or more years of progressive experience in information security, security operations, incident response, or a related discipline.
• Hands-on experience investigating alerts, managing incidents through ServiceNow or an equivalent platform, and working within formal escalation and on-call procedures.
• Experience with Zscaler, Microsoft Defender XDR, Microsoft Sentinel, Microsoft Entra ID, Microsoft Purview, Exchange Online security controls, or comparable platforms.
• Knowledge of vulnerability risk, exploitability, remediation prioritization, risk acceptance, email-security controls, SPF, DKIM, and DMARC.
• Working knowledge of AI-security risks, generative AI, data protection, shadow AI monitoring, and secure AI-enabled security capabilities.
• Strong documentation, communication, analytical judgment, independent decision-making, and cross-functional coordination skills.

Nice to have

• Experience with ServiceNow security modules, Microsoft Defender Vulnerability Management, Tenable, Qualys, Rapid7, or equivalent platforms.
• Familiarity with SOX requirements, IT general controls, evidence-based control testing, and cloud-security monitoring across Azure or AWS.
• Knowledge of the NIST AI Risk Management Framework and Generative AI Profile.
• Security+, SC-200, AZ-500, CISSP, GCIH, or equivalent certification.
• PowerShell or Python skills, including API and workflow automation.

Culture & Benefits

• Work in an entrepreneurial, collaborative, and disciplined environment.
• Receive challenging assignments and exposure to diverse business groups.
• Participate in structured security operations, incident response, and on-call procedures.
• Work within formal change-management, least-privilege, documentation, and control-review practices.