SecOps Engineering Lead

Would you like to help enrich the lives of learners around the world?

At RM, we’ve been pioneers of education technology since 1973. We provide technology and resources to the education sector, supporting over 20 million students and improving educational outcomes worldwide.

What we do helps learners at all stages of their lives, from preschool to higher education and professional qualification; we partner with schools, examination boards, governments, and professional organisations globally to make learning more accessible, more engaging, and more impactful.

RM operates through three divisions:
Assessment (digital assessment and marking solutions), Technology (managed services, hardware, and software for schools), and TTS (educational resources).

Within the assessment market we are experts in providing solutions for online exam testing and marking and the management and analysis of educational data. We work with government ministries, exam boards and professional awarding bodies for high stakes assessment such as GCSEs, ALevels, and professional qualifications. Each year, our software is used globally to conduct hundreds of thousands of on-screen tests and to mark millions of paper-based scripts.

For over a decade we have been partnering with the world’s leading awarding bodies to deliver intuitive, secure, and reliable e-marking solutions.

Visit our website to find out more:

We are hiring a hands‑on Security Engineering & SOC Lead to build and run the controls our Cyber Security Architect designs, and to lead security operations for our Azure-hosted, multi‑tenant SaaS platform: SOC engineering, detection and monitoring, incident response, and managing a team of three analysts. 60% of the role is engineering: putting Azure guardrails, SOC tooling, pipeline security tooling and platform hardening into production.

The rest is running the SOC: keeping security observability controls healthy, improving detections, leading response, and developing the three analysts. You are expected to be a senior hands‑on practitioner in the team and the analysts' escalation point, so you are expected to troubleshoot and fix issues yourself rather than only direct.

A BPSS (Baseline Personnel Security Standard) is applicable to this role, therefore appropriate security checks will be carried out as part of the recruitment process prior to any offer being made.

Security engineering: implementing the architecture

• Build the Azure controls the security architecture defines:
  Azure Policy initiatives and Defender for Cloud plans, Entra l Access and PIM, Key Vault and managed identity patterns, and network segmentation with Private Link, Azure Firewall and WAF rules.
• Deliver the Dev Sec Ops  tooling in Git Hub Actions or Azure Pipelines: SAST, SCA, secrets, container and IaC scanning, with tuned rules, reusable pipeline templates and feedback developers can act on.
• Implement supply chain controls: SBOM generation, artifact signing and verification, dependency and base image policy, and the move from long‑lived pipeline secrets to OIDC federation.
• Harden AKS and the platform services: admission policies, network policy, image provenance and workload identity, written as Terraform or Bicep with tests.
• Own remediation of penetration test, Defender for Cloud and scanner findings with engineering teams, tracked to closure and reported monthly.
• Support the S‑SDLC day to day: run the tooling, help teams threat model, sit on design reviews for security‑relevant changes, and coach the security champions.

SOC operations and Microsoft Sentinel

• Run the SOC day to day: queue health, shift and on‑call cover, escalation, and the runbooks the analysts work from.
• Administer SOC tooling: workspace and data connector…