Senior Security Analyst

Job Summary

The Senior Security Analyst role will work within our Cyber Security team to detect potential security events, manage risk and drive an effective response. The role offers the opportunity to help grow the Cyber Security team’s capabilities, which are highly visible across the business and have a direct impact on protecting Square Enix’s games, systems and data.

Day to day,the Senior Security Analystwill beresponsible for identifying, prioritising, and reducing organisational cyber risk through proactive exposure management,investigating alerts andresponding to incidents.The rolewill be maintaining and optimising Cyber Security tooling as well as contributing towards the increased use of automation and AI.The role’sanalytical and risk skills will be applied across the whole Cyber Security teamto ensure vulnerabilities and exposures are identified, prioritized by risk, and remediated efficientlyandtoassist with security improvements and risk management activities.

This role suits someone with broad cyber security experience who is looking to deepen their expertise and make a measurable impact in an exciting, fast-moving industry.

Roles, Responsibilities, and KPIs

• Own and continuously improve our Vulnerability Management process, including the use of automation and AI to support efficient triage, analysis and remediation.

• Drive Exposure Management initiatives including vulnerability discovery, prioritisation and remediation tracking, focusing on risk‑based outcomes.

• Monitor internal and external attack surface exposure including cloud, on-prem, and third-party assets.

• Work closely with system owners to help them manage their vulnerabilities. Assist them in implementing any resolution actions in a risk focused and timely manner.

• Support theSecurity Risk Management functionwith risk analysis activities, including third party risk assessments.

• Design and implement automation‑supportedworkflows andexplore the practical use of AI‑assisted features within security tools to improve efficiency and consistency.

• Maintain andenhanceourtools and platforms to continuously improve ourintelligence,detection and response capability.

• Perform in-depth investigation and analysis of security alertsto identify and promptly respond to securityevents.

• Collaboratewith key stakeholders during investigations to gather further information and coordinate response actions.

• Derive value fromrelevant threat intelligence to drive proactive action.

• Influencethe strategic direction of our team by presenting insight into the security events, alerts and incidents we handle.

• Maintain a broad understanding of IT/online environments and key company assets to enhance decision making and response to incidents.

• Support thedetection of game specific abuses such as leaks, cheats, piracy, copyright abuse, player account compromise and rogue sites.

Performance Measures

• Mitigation time for Critical and High risk vulnerabilities

• Mean time for business recovery to C1 (Highest criticality) level security incidents

• Security event triage time

• Game/brand leak detection timeframes

Experience and Qualifications

• Experience in cyber security, security operations, risk, IT, engineering, or similar environment, with exposure to security monitoring and response.

• Experience responding to or handling major cyber security incidents.

• Relevant Security Operations, Incident Response, or Risk Management certifications are welcomed (or equivalent practical experience).

Interpersonal and Technical Skills

• Effective communication skills with non-technical stakeholders and executives.

• Able to stay focused during incidents and work methodically with the support of the wider team.

• Curious about how automation and AI‑assisted capabilities can support Cyber Security work and improve ways of working.

• Comfortable prioritising work, making sound risk‑based recommendations, and knowing when to seek input or elevate.

• Familiarisation with common Incident Response frameworks such as NIST.

• Strong appreciation of attacker tactics, techniques and procedures.

• Occasional flexibility may be needed for urgent incidents; we aim to plan work sustainably.

• Knowledgeand hands onexperience withCyber Securitytools, such as Vulnerability/Exposure Management, SOAR and SIEM platforms.

• Abletoqueryand analysestructured log data.

Purpose & Values

• Purpose: Creating New Worlds with Boundless Imagination to Enhance People’s Lives.
• Values:
  • Deliver Unforgettable Experiences
  • Embrace Challenges
  • Act Swiftly
  • Stronger Together
  • Continuously Evolve
  • Cultivate Integrity