Security Operations

• Develop and deliver security reports and metrics to support operational awareness and leadership decision-making.
• Identify and support mitigation of information security risks, including evaluating projects and initiatives for alignment with security requirements, policies, and standards.
• Support internal and external audits by collecting and analyzing evidence, assessing control effectiveness, and ensuring adherence to established security frameworks and policies.
• Track and manage remediation activities, including corrective action plans and audit findings, ensuring timely resolution of identified security issues.
• Identify, investigate, and respond to security incidents, including analyzing root cause and impact to contain threats and reduce organizational risk.
• Maintain and support security tools, controls, and monitoring capabilities to ensure effective detection and response.
• Develop, implement, and continuously improve threat-informed detections and automated response playbooks, including use case development, rule creation, tuning, validation, and optimization through incident feedback and testing.
• Monitor systems and security telemetry for violations, vulnerabilities, and anomalous activity.
• Analyze and apply threat intelligence to enhance detection, response, and situational awareness.
• Identify and support onboarding and validation of security telemetry to ensure effective detection and visibility.
• Collaborate with cross-functional teams to support incident response, remediation, and security improvements.
• Assist in the evaluation and selection of security technologies and solutions to support detection, monitoring, and response capabilities.

Senior Security Operations Analyst

• Ensure security alerts and anomalous activities are continuously monitored, accurately logged, and escalated in accordance with established procedures.
• Lead and coordinate timely, effective response to cybersecurity incidents to minimize business impact.
• Support restoration of affected systems and services following cybersecurity incidents, including leading forensic investigations as required.
• Research emerging threats and attack vectors, and implement appropriate countermeasures to continuously strengthen the organization’s security posture.
• Coordinate internal and external penetration testing activities to identify and remediate exploitable weaknesses.
• Ensure protective security controls are implemented and operating effectively to reduce risk exposure.
• Coordinate with compliance and IT teams to design, implement, and maintain operational security controls.
• Support asset cataloging and ownership alignment to ensure accountability for systems, data, and security controls.
• Execute quarterly User Access Reviews across the application portfolio in an efficient manner.
• Respond to external audit and compliance questionnaires, providing accurate and timely security documentation and evidence.
• Ensure employees, vendors and/or contractors with access to systems and data are appropriately trained in relevant security awareness and individual security responsibilities.
• Design, manage, and enforce the organization’s security awareness program, including the execution of recurring phishing simulation campaigns.
• Support the development, testing, and ongoing improvement of Disaster Recovery plans to ensure the organization can effectively respond to and recover from disruptive events, including cybersecurity incidents.
• Serve as a trusted security advisor to internal teams, raising awareness and providing guidance to help protect products, systems, and services from known and emerging threats.

Security Operations Manager

• Oversee 24/7 monitoring, triage, and escalation of OT security alerts across industrial environments
• Support complex incident investigations and ensure quality of analysis across all tiers
• Ensure adherence to SLAs, ticket quality, and operational KPIs
• Lead and manage a team of OT SOC analysts (Tier 1 / Tier 2)
• Provide coaching, mentoring, and performance feedback
• Support shift planning, coverage, and handovers
• Drive improvements to detection rules, playbooks, and SOC procedures
• Identify gaps in monitoring, response, and tooling
• Collaborate with engineering and threat detection teams for tuning and optimisation
• Act as a key point of contact for customers during incidents and escalations
• Ensure proper communication during major incidents
• Support reporting, service reviews, and customer discussions
• Coordinate with internal teams (engineering, IR, service delivery)

OT SOC Team Lead

• Supports security, safety and protection efforts for Independent Health associates, guests, visitors, members and properties
• Responsible for 24x7 monitoring, reporting and response associated with Physical Security initiatives at the main campus, affiliate, and Medicare Information Center locations
• Includes oversight of access controls, alarms, CCTV, and accurate and timely notification of events impacting physical security and/or facilities to the appropriate IH team member
• Daily monitoring of security cameras and campus site/buildings
• Physical security liaison to IHA & IHC associates
• Support of IHA & IHC departmental needs including escort
• Familiarity and response to campus emergency and security incidents/events including 911 calls
• Maintenance and preparation of daily reports, logs and incident reports as required
• Answer alarms and investigate disturbances, coordinating with Facilities managers as appropriate
• Report unlawful activities such as theft or vandalism to law enforcement officers for further actions
• Coordinate with guard force to include but not limited to, assessing; validating routine patrol rounds are conducted within the assigned premises; ensuring daily reports, logs and incident reports are completed by the security guard force

Security Operations Center Officer

• Operationalize the London office physical security program, including access control, visitor management, contractor access, incident response, and office security operations.
• Manage security vendors and the contract guard force, including post orders, performance, coverage, KPIs / SLAs, and continuous improvement.
• Partner closely with Workplace / Facilities, HR, IT / InfoSec, Legal, EHS, GSOC, and office leadership to implement sensible, employee-friendly security controls.
• Lead local incident response and follow-through, including documentation, after-action reviews, and corrective actions.
• Support security planning for in-office events, leadership visits, and business travel into / out of London as needed.
• Drive emergency preparedness, including evacuation / muster processes, tabletop exercises, and drills in coordination with Workplace.

Corporate Security Operations Manager

• Engineer and maintain security operations platforms (SIEM, EDR, NDR, email, cloud)
• Apply a detections-as-code approach
• Architect and implement security engineering capabilities
• Collaborate with cross-functional teams to embed security controls
• Research, evaluate, and operationalize security products and services

Security Operations Engineer

• Demonstrates strong and effective communication skills
• Trains team members
• Acts as subject matter expert (SME) in one or more security domains
• Supports security incident reporting and escalation processes
• Evaluates technical threats, risks, and emerging attack vectors

Senior IT Specialist, Security Operations Center

• Zero-Trust System Design: Draft, review, and maintain zero-trust SOPs across identity, device, data, and infrastructure.
• Infrastructure-as-Code & Automation: Extend Net-Sec-Ops pipelines with IaC (Ansible) for firewalls, switches, SD-WAN, and edge fabric.
• Systems Resilience & Disaster Recovery: Architect and automate backup, failover, and DR workflows for all network devices.
• Security & Compliance Orchestration: Integrate vulnerability scanners (Nessus, Qualys), threat-intel feeds, and policy-as-code into CI/CD pipelines.
• Network Configuration & Lifecycle Management: Operate configuration managers to centralize topology, inventory, and device state.
• Cross-Functional Architecture Governance: Collaborate with platform, edge, security, and product teams to embed network security into CI/CD and DevOps pipelines.
• Capacity & Performance Modeling: Model traffic and compute link utilization; forecast capacity needs using historical data and predictive analytics.
• Continuous Process & Tool Improvement: Evaluate emerging trends; propose tool/process changes to reduce manual effort and improve security posture.
• Prototyping & Customer Validation: Rapidly spin up proof-of-concept environments to test complex customer requests.

Systems Infrastructure, Network Security Operations Engineer

• Operate and tune enterprise security tools (EDR, SIEM/SOAR, WAF/proxy, email security).
• Manage proxy filtering policies, exceptions, SSL inspection, and performance troubleshooting.
• Build automation and playbooks (Python/PowerShell, SOAR, APIs) to streamline SecOps tasks.
• Implement CI/CD pipelines and Infrastructure-as-Code workflows for consistent, auditable security configuration changes.
• Author and tune detection rules; improve signal quality and reduce false positives.
• Maintain and author health dashboards, uptime/coverage metrics, and change governance documentation.
• Conduct knowledge transfers through runbooks, how-to guides, tabletop exercises, and lunch & learn training sessions.
• Maintain upgrade schedules, license compliance, configuration baselines, and key/secret rotations.
• Administer URL/category policies, SSL inspection, identity-aware policies, geo/risk-based controls, and performance troubleshooting.
• Analyze block events for false positives; measure impact; retire exceptions on schedule and report residual risk.
• Build and maintain an automation backlog in partnership with SecOps, prioritizing high-frequency, high-toil tasks.
• Provide on-call support for tooling availability and ingestion/normalization issues.
• Report on metrics (uptime, coverage, MTTR, lead time, change success rate, exception aging).
• Keep documentation, diagrams, and asset inventories current.
• As needed, monitor and respond to alerts raised by various toolsets as part of an ongoing 24/7 Security Operations Center.
• Report outages or incidents following guidelines and procedures.
• Detect, analyze, and respond to incidents, coordinate with other stakeholders for containing, eradicating, and recovering from an incident.
• Assist in developing testing criteria to implement new signatures/rules.
• Participate in on-call rotations, including nights, weekends, and holidays.

See all jobs on JobTailor

Senior Security Operations Analyst

Security Operations Manager

Security Operations Manager

OT SOC Team Lead

Security Operations Center Officer

Corporate Security Operations Manager

Security Operations Engineer

Senior IT Specialist, Security Operations Center

Systems Infrastructure, Network Security Operations Engineer

Security Operations Engineer II