Senior InfoSec Engineer

Oxford Nanopore Technologies (ONT) has developed a new generation of nanopore-based sensing technology for faster, information-rich, accessible and affordable molecular analysis. The technology is used to understand and characterise the biology of humans, animals, plants, bacteria, viruses and diseases such as cancer. By enabling biological insights, we strive to improve life on Earth and beyond.

Oxford Nanopore Technologies (ONT) has developed a new generation of nanopore-based sensing technology for faster, information-rich, accessible and affordable molecular analysis. The technology is used to understand and characterise the biology of humans, animals, plants, bacteria, viruses and diseases such as cancer. By enabling biological insights, we strive to improve life on Earth and beyond.

The Senior Info Sec Engineer in responsible for enhancing the cybersecurity defences of ONT’s information systems.

You will investigate suspicious activity across the organisation's security telemetry, contain incidents and develop new procedures. You will also improve our internal SOC processes by developing detections, automating repeatable tasks, testing monitoring coverage, and sharing practical knowledge with the wider team. You will lead the design, testing, identification and communication of security weaknesses to stakeholders across ONT and improve security controls and practices.

You will fully exploit the security tools available and enhance ONT’s technical assurance activities, working alongside Global IT teams to implement proactive security configurations including Endpoint Detection and Response (EDR), Security Information and Event Management (SIEM), User Entity and behaviour Analytics (UEBA), Secure Web Gateway (SWG), Data Loss Prevention (DLP), email filtering, and vulnerability scanning tools and have the opportunity to uncover security flaws and control weaknesses across Oxford Nanopore's IT and application estate, while performing security operations functions to bolster the Managed Security Operations Centre (MSOC) in order to protect Oxford Nanopore and its information, and respond in a timely manner to cyber threats.

• Develop the blue team and threat hunting capability to harden and enhance the technological controls on Oxford Nanopore's IT estate.
• Design, deploy and harden system configuration across enterprise IT devices.
• Perform day-to-day BAU security operation activities including triaging and prioritising alerts from SIEM, EDR, identity, cloud, and other monitoring sources, separating genuine threats from benign activity.
• Lead or contribute to incident investigations from initial validation through scoping, containment, eradication, recovery, and post-incident review.
• Develop, tune, and validate detection logic, queries, rules, and dashboards so that monitoring is useful, explainable, and aligned to realistic risks.
• Work with the MSOC and as part of the Incident Response Team.
• Work with third parties to securely configure the platforms contributing to Oxford Nanopore’s security stack: EDR, SIEM/SOAR, SWG, DLP and vulnerability management.
• Advise on security architecture improvements: changing vendors, enhancing services and identifying solutions
• Produce high-quality technical documentation.
• Turn recurring findings into measurable improvements to playbooks, detections, telemetry, response processes, and service reporting.

• An interest in uncovering security flaws.
• Experience working within a complex hybrid environment.
• Previous experience with incident response and can bring suggestions on good practices that suit Oxford Nanopore.
• An enthusiasm for self-learning and continually…