SecOps Specialist

Location – London (minimum 3 days in office per week)

Salary – £100-120k + 20-30% Bonus + Great Benefits

Currently working with a major UK Fund who are in the process of building out their Cyber Defence capability and looking to bring in a cloud-based Security Operations Specialist, with a blend of both Analysis and Engineering experience.

You will be dealing with escalated alerts from a 3rd party MSSP, investigating and responding to the most complex incidents whilst building out IR Playbooks and Processes and developing the internal Threat Hunting capability. A key aspect of the role will be building out the detection-as-code capability, identifying areas to automate where possible and building out the Threat Hunting capability.

This is an incredible opportunity for an experienced Senior Sec Ops Analyst / Engineer to join a growing yet established firm at a crucial point as they completely build out their Information and Cyber Security capability. Whilst they have the fundamentals in place, this is a completely greenfield, cloud-native Sec Ops buildout, where you will work alongside the Head of Sec Ops to shape their monitoring, detection and response capabilities.

• Act as a lead and technical escalation point on the most complex incidents and investigations.
• Proactively look for opportunities to automate, fine-tune and streamline the detection engineering and general Sec Ops capabilities.
• Utilise various internal and external Threat Intelligence feeds to execute proactive threat hunting campaigns.
• Mentor and train junior team members through complex incident response investigations.

• Significant experience working in a SOC/Sec Ops/Detection Engineering environment, responding to and containing the most high-profile, escalated incidents.
• Comprehensive knowledge of the Microsoft Security stack – Defender, Sentinel, E5 Security Suite.
• Proven experience building detection rules, fine-tuning and streamlining SOC tooling and capabilities.
• Experience working in cloud-native SOC environments – Azure/AWS/GCP.