Cyber Defence Senior Analyst at A&O Shearman

Global IT at A&O Shearman is driving the technology that underpins a leading international law firm. Our strategy is centered on creating a connected, forward‑looking environment where secure, high‑performing platforms enable people to work seamlessly across our global network. We combine deep technical expertise with a sharp focus on business outcomes - ensuring technology is not just reliable, but a true enabler of growth and innovation. From cloud and infrastructure to data and security, we are continuously evolving our technology landscape to meet the demands of a fast‑paced, global business. It’s an environment where ideas are valued, standards are high, and impact is tangible.

Investigate Level 2 escalated events and alerts which have detected been through Level 1 monitoring activities by the firm’s Managed Security Service Provider (MSSP) to identify potential incidents.

Assist and advise junior colleagues during investigations where additional experience is required.

Conduct initial triage and investigation of confirmed incidents.

Perform containment, mitigation, and remediation activities for incidents, ensuring that any required forensic evidence is gathered and documented appropriately along the process.

Participate in security incident response exercises and contribute to post-exercise reviews.

Be part of the Cyber Defence on-call rota, which may require out-of-hours work.

Pick-up and hand-off incident response activities with the rest of the Belfast Cyber Defence team to other teams in different time-zones across the globe, as per our 24-7 follow-the-sun global model.

Maintain and improve playbooks and process documentation for Cyber Defence.

Ensure documentation reflects current threat landscapes and operational practices.

Implement and enhance cyber defence tooling and processes under senior oversight.

Develop new detection definitions and use cases for monitoring tools.

Mentor junior colleagues to support their professional development and operational effectiveness.

Collaborate with other teams (e.g. Information Security, IT) to implement security controls and raise awareness.

Support the Threat and Vulnerability Management team in remediation activities by executing system and configuration changes.

Maintain awareness of current and emerging cyber threats, techniques, and procedures (TTPs) using threat intelligence insights from the Threat and Vulnerability Management team, applying this knowledge in daily operations.

Provide cyber defence guidance to business stakeholders, translating technical concepts into business language.

Maintain awareness of current and emerging cyber threats, techniques, and procedures (TTPs).

Assist the Information Security GRC team with client queries and audits from a cyber defence perspective.

Experience in a security operations or similar technical security role, operationally in at least four of the following domains: Security engineering, Alert triaging, Rule writing, Incident response, Digital Forensics and Incident Response (DFIR), Threat intelligence and management, Vulnerability management, or Security control testing.

Strong understanding of networking and routing protocols (e.g. TCP/IP) and core services (e.g. DNS, SMTP).

Familiarity with cyber defence technologies and tooling, including SIEM solutions, Intrusion Detection & Prevention Systems (ID/PS), Threat and vulnerability management platforms, Endpoint protection, and Firewalls.

Highly analytical mindset with the ability to interpret data flows, assess anomalies, and draw meaningful conclusions.

Demonstrated ability to investigate complex security issues and propose effective solutions.

Excellent verbal and written communication skills, translating cyber security terminology into professional and straightforward language suitable for a global law firm which includes technical and non-technical teams.

A genuine passion for continuous learning and development in cybersecurity, staying up to date with the latest developments, trends, and technologies in the field.

Bachelor’s degree in Information Security, Computer Science, Engineering, Technology, or a related field.

Industry-recognised certifications such as, CISSP, CEH, CISM, CompTIA Security+

Experience working with major cloud service providers (CSPs) technologies, such as: Microsoft Azure Google Cloud Platform (GCP) Amazon Web Services (AWS)

Google Cloud Platform (GCP)

Amazon Web Services (AWS)

Prior legal firm or professional services firm experience

Practical experience with scripting languages such as Python or PowerShell to support automation and tooling enhancements.

Explore the location and commute options

The technology you’ll work with

In global IT, you’ll be supported by a modern, enterprise‑grade technology ecosystem designed to enable performance, security and innovation. Our environment brings together best‑in‑class platforms, cloud infrastructure and specialist tools that underpin a leading global law firm. From collaboration and knowledge sharing to advanced security and data capabilities, we ensure our teams have what they need to deliver at pace. Alongside access to the latest technologies, you’ll benefit from strong technical communities, structured learning and ongoing investment in our IT landscape - empowering you to build expertise and drive meaningful impact.

In global IT, excellence is built through a combination of technical expertise, curiosity and a drive to continuously improve. Our strongest performers bring a pragmatic, solutions‑focused mindset and take ownership of delivering high‑quality outcomes. They collaborate effectively across teams, adapt quickly to change and stay focused under pressure. With a clear understanding of how technology enables the business, they balance innovation with reliability. Above all, they are committed to raising standards - contributing ideas, refining approaches and consistently delivering impact in a fast‑moving, high‑performance environment.

As a leading global law firm, we rely on our global IT function to keep us at the forefront - enabling our people with secure, innovative and high‑performing technology.

Our IT teams play a critical role in ensuring the business runs seamlessly and adapts to change. You’ll work in a collaborative, international environment where your expertise has real impact, supporting lawyers and business teams across the firm.

We offer a high‑performance, partnership culture built on trust, continuous improvement and innovation. With strong investment in development and clear opportunities to grow, you’ll be empowered to bring new ideas and shape how we operate.

You can build a career here with clear expectations, regular development conversations, and ongoing access to training. We tailor development to your role and strengths, helping you build leadership, management, and business skills to reach your potential.

You’ll benefit from a wide range of learning via our platform, supported by regular check-ins through our compass approach to align priorities and development goals.

We support internal progression, including moves that aid growth. Many colleagues explore varied roles, secondments, or international opportunities - so being proactive, owning your development, and sharing your goals is key to making the most of these possibilities.

Your journey, our commitment

We believe recruitment should feel clear, respectful and genuinely engaging at every stage. Our approach is built around open communication, meaningful conversations and giving you a true sense of who we are - how we work, what we value and where you could fit. We ask for professionalism and openness in return. It’s a partnership, grounded in trust and transparency, designed to help you make confident, informed decisions your career while enabling us to get to know you at your best.

Our range of benefits is designed to meet your changing needs, providing support for physical, mental and financial well-being. We regularly review our reward and benefits programs to ensure they remain relevant and competitive. We believe it’s important for our people to in the success of the firm and be recognized for their contributions. We do that through a range of salary, discretionary bonus plans and market-competitive benefits.

Our benefits packages vary by location but are guided by the same global principles:

Access to check-ups, insurance cover, extra support when needed, and well-being platforms.

Remuneration and rewards

We recognize contribution to client work, or business teamwork, as well as to the firm and the community. We the financial success of the firm in a fair and transparent manner.

We look to provide financial peace of mind, which can include insurances, assurances, and saving for retirement (market-dependent.)

We aim to support you in managing your demands and commitments effectively alongside your working life, as well as providing perks and discounts to assist with travel, fun and well-being.

Learning and development

We invest in your performance and progression by giving you access to top-quality training and development through an ongoing blend of structured and informal learning opportunities.

With us, you’re encouraged to volunteer your time and skills, whether you’re a lawyer or business professional, junior or senior. You’re free to choose a cause that matters to you, or to support our chosen global charity.

Our latest jobs in information technology

Our latest jobs in information technology