Security Operations Lead

About Lendable Lendable is on a mission to build the world's best technology to help people get credit and save money.

We're building one of the world’s leading fintech companies and are off to a strong start:

One of the UK’s most exciting unicorns with a team of over 800 people

Among the fastest-growing tech companies in the UK Profitable since 2017

Backed by top investors including Balderton Capital and Goldman Sachs Loved by customers with the best reviews in the market (4.9 across 10,000s of reviews on Trustpilot)
So far, we’ve rebuilt the Big Three consumer finance products from scratch: loans, credit cards and car finance. We get money into our customers’ hands in minutes instead of days.

We’re growing fast, and there’s a lot more to do: we’re going after the two biggest Western markets (UK and US) where trillions worth of financial products are held by big banks with dated systems and painful processes.

Join us if you want toTake ownership: you are trusted to make decisions that drive a material impact on the direction and success of Lendable from day 1

Work in small teams of exceptional people:
Lendies are relentlessly resourceful. We challenge the status quo to solve problems and find smarter solutions

Build the best technology in-house: we use new data sources, machine learning and AI to make machines do the heavy lifting

About the Role As the Security Operations Lead, you will take strategic and operational ownership of Lendable’s internal Sec Ops capability and serve as the technical relationship owner of our external Managed Security Service Provider (MSSP). You will act as our primary incident responder, with a strategic view on how Lendable’s operational defence should mature as we grow.

This is a high-impact, senior individual contributor role with a path to management. We are looking for a "player-coach" who can execute deep 2nd and 3rd-line technical analysis today, while strategically designing and building out our internal Sec Ops function and team over the coming year.

What You’ll Be Doing
1. Incident Command & Advanced Analysis Incident Leadership:
Serve as the primary Incident Commander for high-severity security escalations, coordinating cross-functional response efforts. You will have on-call responsibilities, but shared with the wider team.

Advanced Tier 2/3 Analysis:
Act as the escalation point for technical investigations triggered by the MSSP first line team.

Crisis & Resilience Simulation:
Maintain and evolve Lendable’s Security Crisis Management plan, running regular tabletop exercises to ensure business-wide readiness for systemic and supply-chain risks.
2. Vendor Governance & Operational ArchitectureMDR/MSSP Technical Governance:
Serve as the ultimate authority over our external MSSP. Define KRIs/KPIs, run rigorous service reviews, and hold the provider to strict detection quality standards.

Detection & Logging Strategy:
Own Lendable's detection engineering roadmap. Ensure comprehensive, high-fidelity log ingestion pipelines across all corporate and cloud assets, focusing on minimising false positives and alert fatigue.

Automation-Driven Remediation:
Oversee the vulnerability management lifecycle, partnering with IT and Engineering to drive automated remediation workflows rather than relying on manual tracking spreadsheets.
3. Capability Architecture & Strategic Maturity Threat Intelligence:
Develop a Threat Intel capability that translates external threats into actionable, proactive defences.

Core Domain Ownership:
Take operational security ownership across our foundational tech stack, continuously optimising our posture across domains such as EDR, Email Security, DLP, and IAM to prevent data exfiltration and identity-based attacks.

Capability Scaling:
Drive the…