Era4 develops, owns and operates AI infrastructure across the UK, powered by renewable energy. Converting legacy industrial and energy sites into modern data-centre facilities, Era4 is combining brownfield regeneration opportunities with cleaner, efficient, scalable compute capacity for healthcare, research, finance, enterprise, and public-sector organisations

Role Summary:

We are seeking an Infosec Analyst to serve as the primary operational interface into Era4's Security Operations Center (SOC). This role focuses on security monitoring, threat detection, incident response, and protecting our next-generation AI datacentre infrastructure, cloud platforms, and applications through proactive security operations.

You will be the key point of contact between security monitoring systems and engineering/operations teams, responsible for monitoring our datacentre security estate, identifying threats across network infrastructure and Era4's proprietary cloud platform, coordinating incident response, managing alerts, and continuously improving our security posture.

The successful candidate combines strong technical security knowledge with hands-on experience analysing logs from enterprise firewalls, datacentre networking, and proprietary infrastructure platforms, along with excellent communication skills and the ability to triage and escalate issues effectively.

Key Responsibilities:

Security Monitoring & Alert Management:

• Monitor SIEM platforms, security tools, and logging infrastructure across datacentre and cloud environments.
• Ingest, parse, and analyse logs from Palo Alto firewalls, OpnSense, Nokia networking platforms, and Nvidia GPU infrastructure.
• Triage, prioritise and investigate security alerts based on severity and business impact.
• Respond to on-call security incidents outside business hours.

Threat Detection & Investigation:

• Perform deep-dive investigations into security incidents and suspicious activities across Era4's datacentre and proprietary cloud infrastructure.
• Analyse firewall logs (Palo Alto, OpnSense), network traffic, system events, and GPU infrastructure telemetry to identify root causes and attack patterns.
• Conduct threat hunting activities to proactively identify indicators of compromise in datacentre traffic and network flows.

Incident Response & Coordination:

• Act as primary coordinator for security incident response activities.
• Communicate incident status and impact to stakeholders across engineering and operations teams.
• Document incidents and contribute to post-incident analysis and lessons learned and support remediation efforts.

Vulnerability & Risk Management:

• Monitor vulnerability disclosures and security advisories relevant to Era4's technology stack.
• Track vulnerability remediation efforts and report on remediation timelines.
• Support vulnerability scanning and assessment activities.

Security Operations & Compliance:

• Maintain and update incident response runbooks, procedures, and playbooks.
• Support compliance activities including log retention, evidence gathering, and audit support.
• Generate security reports and metrics for management and stakeholder review.

Cross-functional Collaboration:

• Serve as primary interface between SOC, engineering, platform, and operations teams.
• Communicate security findings and remediation guidance in clear, actionable terms.
• Support security training and awareness initiatives.

Required Qualifications & Experience:

• Ability to work independently and manage multiple priorities in a fast-paced environment.
• Experience in security operations, SOC operations, incident response, or infosec analysis.
• Solid knowledge of SIEM platforms, log aggregation, security monitoring tools, analysing firewall logs.
• Hands-on experience investigating security incidents and performing detailed log analysis.
• Demonstrated experience with firewall and network security tools (Palo Alto, pfSense, Nokia, OpnSense, or similar).
• Proven understanding of cloud platform security, Kubernetes, and containerized environments.
• Familiarity with NIST incident response framework and incident response procedures, vulnerability management and threat assessment methodologies.

Nice To Have:

• Knowledge of datacentre operations (GPU or AL/ML infrastructure is welcome), infrastructure monitoring, or network operations.
• Familiarity with compliance frameworks such as SOC 2, ISO 27001, or PCI DSS.
• Security certifications such as Security+, CEH, ECIH, GCIH, or similar.
• Experience in DevOps, SRE, or cloud operations environments.
• Scripting experience (Python, Bash, etc.) to automate routine investigations and log parsing.

Why Join Era4:

You’ll be joining a mission-driven start-up building critical national infrastructure, where operational excellence directly enables growth. This role offers high visibility with leadership, real autonomy, and the chance to shape how a next-generation company operates at scale.

Diversity & Inclusion:

Era4 is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.