Security Operations

• Work with various stakeholders from across the group, to ensure security operations practices, policies, and systems are robust, pragmatic and aligned with strategic objectives.
• Define, build, and maintain a comprehensive security operations architecture that addresses current and emerging threats.
• Manage delivery of cyber security projects and co-ordinate business security initiatives to support the organisation’s security posture and strategic goals.
• Provide expert consultancy to technology teams on both reactive (day-to-day issues) and proactive (strategic) security matters.
• Maintain Security Operations documentation, records and evidence to support security assessments, audits, and compliance with legal, regulatory and customer requirements.
• Oversee and enforce adherence to technical security policies, standards, best practices, and customer requirements.
• Lead the monitoring, detection, and investigation of security events & alerts; maintain and improve security control automation, logging, alerting, vulnerability scanning and threat detection capabilities.
• Own incident response procedures; coordinate incident handling, ensure relevant stakeholders and third parties are engaged, lead follow-up actions until resolution.
• Manage and oversee security testing: internal automated technical controls capture and scans, third-party assessments, penetration tests, ensuring findings are tracked and remediated.
• Ensure security controls and processes are integrated across systems, applications, and cloud infrastructure.
• Develop KPIs, SLAs, dashboards to measure and report performance, including response times, false positives, remediation progress etc.
• Stay up-to-date with regulatory/compliance frameworks (e.g. EU Cyber Resilience Act, EU AI Act, ISO 27001, GDPR, PCI-DSS, NIST,NCSC), threat landscape changes and emerging technologies.
• Work across the organisation and beyond to promote best practice across Digital Science, making recommendations for improvements to cyber security practices in line with industry standards and learnings from security incidents.
• Prepare cyber security responses and evidence for internal and external parties.
• Take an active role in information security forums, councils and communities within and outside of the organisation.

Security Operations Lead

• Responsible for identifying, mitigating and investigating suspicious cyber activity.
• Help maintain the University’s ability to deliver core teaching, learning and research digital services.
• Working as part of a small team of cyber security specialists, the role will be at the forefront of protecting the University digital estate from potential cyber threats and risks.

Senior Analyst – Cyber Security Operations

• Operationalize the London office physical security program, including access control, visitor management, contractor access, incident response, and office security operations.
• Manage security vendors and the contract guard force, including post orders, performance, coverage, KPIs / SLAs, and continuous improvement.
• Partner closely with Workplace / Facilities, HR, IT / InfoSec, Legal, EHS, GSOC, and office leadership to implement sensible, employee-friendly security controls.
• Lead local incident response and follow-through, including documentation, after-action reviews, and corrective actions.
• Support security planning for in-office events, leadership visits, and business travel into / out of London as needed.
• Drive emergency preparedness, including evacuation / muster processes, tabletop exercises, and drills in coordination with Workplace.

Corporate Security Operations Manager

• Investigate and respond to security alerts across endpoint, network and cloud environments
• Analyse logs and telemetry to identify indicators of compromise and potential threats
• Support incident investigations and coordinate remediation with internal technical teams
• Develop or refine detection rules and monitoring capability
• Support vulnerability management activities and follow up on remediation actions
• Assist with penetration testing coordination and remediation tracking
• Contribute to security monitoring improvements and automation where appropriate
• Support security compliance activities aligned to ISO27001 and Cyber Essentials Plus

Security Operations Engineer – FTC

• Investigating security events. You'll work alongside our senior team members to navigate incidents across our network, endpoints, and cloud systems. You'll play an active role from the initial alert through to recovery, and as you build your skills and confidence, we will support you to lead these responses.
• Proactively hunting for threats. You test theories about how attackers might target us and search for hidden threats across our systems before they trigger alerts.
• Spotting real threats. You fine-tune our alerts so we only spend time looking at genuine risks. You use these alerts to drive your incident response investigations, focusing your energy on stopping attackers.
• Automating repetitive work. You build automations that handle routine tasks, giving the squad time to focus on complex, analytical challenges.
• Learning from past incidents. You run blameless reviews after incidents to find the root cause, using those lessons to improve our security controls across the business.
• Tracking threat intelligence. You research the attackers that pose a risk to us and turn that knowledge into active, automated defences.

Security Operations Analyst

• Monitor security information and event management (tools), endpoint detection systems and network alerts to detect potential security threats.
• Triage alerts by analysing patterns of behaviours or anomalies.
• Identify and escalate security incidents, particularly those involving sensitive customer data or financial transaction systems.
• Coordinate with senior SOC analysts for immediate containment and mitigation.
• Correlate security alerts with intelligence on financial sector threats, such as phishing campaigns, payment fraud or insider threats.
• Analyse logs related to apps, customer portals, and other critical infrastructure to detect anomalies.
• Highlight suspicious activities like failed logins, unauthorized privilege escalation or unusual data transfers.

SOC Analyst

• Own and oversee enterprise security monitoring capabilities, including SIEM, EDR/XDR, and alerting platforms.
• Lead daily monitoring operations, including alert triage, investigation, and escalation.
• Continuously improve detection use cases, alert logic, and tuning to reduce noise and improve signal quality.
• Act as the primary operational contact for managed security service providers (MSSPs), vendors, and SOC partners.
• Own the full cyber incident lifecycle: preparation, detection, containment, eradication, and recovery.
• Act as senior incident manager for significant security incidents, coordinating technical teams, IT operations, and business stakeholders.
• Maintain, test, and improve incident response plans, playbooks, and escalation procedures.
• Define and track operational metrics such as response times, alert volumes, and control effectiveness.
• Lead and develop Genus’s security operations capability, establishing clear roles, responsibilities, and expectations.

See all jobs on JobTailor