Security Operations Analyst

Monzo Bank

Security Operations Analyst at Monzo specializing in incident response and threat detection. Collaborating with teams to protect customers, data, and systems in a dynamic fintech environment.

Posted 4/24/2026full-timeCardiff • 🇬🇧 United KingdomJunior💰 £40,000 - £55,000 per yearWebsite

Tech Stack

Tools & technologies

AWSAzureCloudGoLinuxMacOSPython

About the role

Key responsibilities & impact

Investigating security events. You'll work alongside our senior team members to navigate incidents across our network, endpoints, and cloud systems. You'll play an active role from the initial alert through to recovery, and as you build your skills and confidence, we will support you to lead these responses.
Proactively hunting for threats. You test theories about how attackers might target us and search for hidden threats across our systems before they trigger alerts.
Spotting real threats. You fine-tune our alerts so we only spend time looking at genuine risks. You use these alerts to drive your incident response investigations, focusing your energy on stopping attackers.
Automating repetitive work. You build automations that handle routine tasks, giving the squad time to focus on complex, analytical challenges.
Learning from past incidents. You run blameless reviews after incidents to find the root cause, using those lessons to improve our security controls across the business.
Tracking threat intelligence. You research the attackers that pose a risk to us and turn that knowledge into active, automated defences.

Requirements

What you’ll need

You have hands-on incident response experience. You have worked in a Security Operations Centre (SOC) and feel confident investigating security events and supporting the wider team during complex incidents.
You understand systems and networks deeply. You know how operating systems (macOS, windows, Linux) and networks work under the hood, and you understand modern attack methods.
You automate your workflows. You hate doing the same manual task twice and have experience using scripting languages (like Python or Go) to build automated tools and interact with APIs.
You solve problems independently. You can navigate tricky investigations and figure out the right path forward, even when there isn't a step-by-step guide to follow.
You communicate clearly. You can explain highly technical forensic findings in everyday language to people who don't work in security.
You have experience with cloud or detection engineering. It is a bonus (but not essential) if you have worked with cloud platforms like AWS or Azure, written detection rules as code, or hold practical security certifications.

Benefits

Comp & perks

£1,000 learning budget each year to use on books, training courses and conferences.
We will set you up to work from home; all employees are given Macbooks and for fully remote workers we will provide extra support for your work-from-home setup.
Flexible working hours and trust you to work enough hours to do your job well, and at times that suit you and your team.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

incident responsesecurity event investigationthreat huntingalert fine-tuningautomationscripting languagesPythonGodetection engineeringcloud security

Soft Skills

problem solvingindependent workclear communicationanalytical thinkingteam collaborationadaptabilityattention to detailcritical thinkingroot cause analysisblameless review

Certifications

practical security certifications