Security Specialist - Cyber Operations

One day you could be investigating security alerts and responding to incidents. The next, you'll be enhancing detections, improving security tooling, supporting threat hunting activities or helping to develop the playbooks and processes that drive our security operations. You'll join a highly collaborative team where your ideas and expertise will be valued. With exposure across Security Operations, Cyber Engineering and Threat Management, you'll have the opportunity to broaden your experience, influence how we operate and play a meaningful role in the continued development of our cyber capability.

If you're someone who enjoys solving complex problems, thrives in a fast-paced environment and wants to make a visible impact, we'd love to hear from you.

• Monitoring, investigating and responding to cyber security alerts, events and incidents.
• Conducting proactive threat hunting activities to identify and contain potential threats before they impact the business.
• Maintaining and optimising cyber security technologies and tooling.
• Supporting the continuous improvement of security monitoring, detection and response capabilities.
• Working closely with our MSSP to review performance, detections and operational effectiveness through KPI/KRI reporting and ensuring effective triage and escalation of cyber threats.
• Investigating security events through to remediation within agreed SLAs.
• Helping develop operational processes, procedures, playbooks and detection use cases.
• Supporting incident response activities and remediation efforts to minimise business impact.
• Improving dashboards, alerting and reporting to drive operational efficiency and visibility.
• Providing oversight and support for cloud security controls and configurations.
• Supporting purple team exercises and validating the effectiveness of security controls.
• Working collaboratively with Cyber Threat Management and wider technology teams to strengthen our security posture.
• Supporting the delivery and execution of MAB's cyber security strategy and operational objectives.
• Acting as a deputy for the Security Manager, Cyber Operations when required including escalating and communicating key security issues to senior Information Security stakeholders.
• Participating in an on-call rota to provide support outside normal working hours when required. We're looking for a hands-on cyber security professional who enjoys both the operational and technical aspects of security. You'll be someone who is equally comfortable investigating a security alert, improving a detection rule, maintaining security tooling or contributing ideas that strengthen security operations.

• Experience working within a SOC, Cyber Operations, Security Engineering or Incident Response environment.
• Strong experience monitoring and investigating cyber security events.
• Experience maintaining and administering security technologies, tooling and controls.
• Knowledge of threat hunting, protective monitoring, detection engineering and incident response.
• Experience working within a regulated environment, with Financial Services experience advantageous.
• A strong understanding of modern cyber threats and defensive security practices.
• Experience working with SIEM platforms and security monitoring tools.
• Strong analytical and problem-solving skills.
• Excellent stakeholder management and communication skills.
• Relevant cyber security certifications and qualifications.
• The ability to communicate technical concepts clearly to technical and non-technical audiences.
• A calm and methodical approach when managing incidents and working under pressure.
• A self-starting approach, with the ability to work independently as well as collaboratively within a highly technical cyber security team.
• A continuous…