Security Operations

• Serve as the primary Incident Commander for high-severity security escalations, coordinating cross-functional response efforts. You will have on-call responsibilities, but shared with the wider team.
• Act as the escalation point for technical investigations triggered by the MSSP first line team.
• Maintain and evolve Lendable’s Security Crisis Management plan, running regular tabletop exercises to ensure business-wide readiness for systemic and supply-chain risks.
• Serve as the ultimate authority over our external MSSP. Define KRIs/KPIs, run rigorous service reviews, and hold the provider to strict detection quality standards.
• Own Lendable's detection engineering roadmap. Ensure comprehensive, high-fidelity log ingestion pipelines across all corporate and cloud assets, focusing on minimising false positives and alert fatigue.
• Oversee the vulnerability management lifecycle, partnering with IT and Engineering to drive automated remediation workflows rather than relying on manual tracking spreadsheets.
• Develop a Threat Intel capability that translates external threats into actionable, proactive defences.
• Take operational security ownership across our foundational tech stack, continuously optimising our posture across domains such as EDR, Email Security, DLP, and IAM to prevent data exfiltration and identity-based attacks.
• Drive the technical roadmap for SecOps maturity. Systematically close visibility gaps, optimise operational metrics, and introduce AI-augmented capabilities (e.g., automated response playbooks).
• Design the future-state roadmap for the SecOps function. As you scale our technical capabilities, architect the requirement for team expansion, ensuring the team grows in lockstep with operational maturity.

Security Operations Lead

• This role creates thought leading security operations, monitoring and vulnerability management research to our Gartner for Technical Professionals clients through published research, conversations with client (Inquiry), stage presentations, teleconferences, and client meetings
• Meet with clients every day: on the phone, in a video-conference, from the stage at a Gartner event or face-to-face during a sales support visit
• Research technology, practices and trends and produce written research for Gartner clients to download and apply
• Deliver high quality actionable advice through a variety of media
• Write high quality, clear, actionable, advisory research documents
• Remain ahead of the curve on developments and issues within these specified areas as well as applicable adjacent areas
• Articulate and defend assigned topic positions during discussions, while demonstrating openness to reconsidering viewpoints and accepting consensus decisions
• Respond to client questions, create materials for and deliver to clients in person, via teleconference, video conference or webinar and event presentations
• Maintain the Gartner’s industry leadership reputation by responding to press inquiries
• Proactively work with the wider sales organization and deliver outstanding sales support to retain and grow the business

Senior Director Analyst – Security Operations, Threat Detection, Response and Automation

• Triaging of security events, determining entities involved and providing context to investigation notes.
• Monitoring and responding to security events across our cloud infrastructure, SaaS applications and native mobile applications.
• Handling SecOps responsibilities and provide technical security support to colleagues across the business.
• Leading engineering projects to improve our monitoring and detection capabilities.
• Leveraging Cyber Threat Intelligence to pro actively protect the business from cyber threats.
• Identifying repetitive tasks and create automated workflows and agentic solutions.
• Be involved in Security playbook creation, development and refinement.

SecOps Engineer

• Lead and support the response to all security events and incidents across Twilio’s complex global infrastructure, services and applications.
• Be responsible for documentation of incidents and projects you work on and craft best practices as runbooks and standard operating procedures to share knowledge across teams.
• Work cross-collaboratively to understand and help solve challenges related to a broad spectrum of threat actors and activity.
• Work to improve Twilio’s security and reliability posture by driving identified betterments from security events and incidents.
• Rapidly acquire new technical skills and knowledge in a fast-paced, highly disruptive industry environment.
• Own the security incident lifecycle, respond to incidents and participate in on-call rotation and participate in RCAs for security incidents.
• Build, cultivate, and maintain positive relationships with internal customers to identify and facilitate solutions to increase the impact of the team’s work.
• Provide mentorship, support, and care for the team in a way that enables long-term career development, happiness, and success at scale.

Security Engineer, Incident Response

• Lead the day-to-day operation of the Security Operations Centre, ensuring high-quality security monitoring, incident response and threat detection services.
• Provide technical leadership, mentoring and coaching to SOC Analysts, supporting their development and driving consistent investigation standards.
• Act as the senior escalation point for complex or high-priority security incidents, providing technical oversight and coordinating response activities.
• Oversee incident investigations using Microsoft Sentinel, Microsoft Defender XDR and Microsoft Entra ID, ensuring incidents are accurately prioritised, investigated and resolved.
• Drive continuous improvement across SOC processes, detection engineering, automation, playbooks and operational procedures to enhance service quality and efficiency.
• Monitor SOC performance against KPIs and SLAs, producing operational reporting and identifying opportunities to improve service delivery.
• Build strong relationships with customers and internal stakeholders, providing technical guidance and contributing to service reviews and operational governance.
• Support onboarding of new security technologies, telemetry sources and Microsoft security capabilities, ensuring they are effectively integrated into SOC operations.
• Promote operational excellence by identifying gaps in tooling, processes or detection coverage and implementing practical improvements.
• Contribute to the ongoing maturity of the SOC, ensuring services remain proactive, resilient and aligned with evolving cyber threats.

SOC Operations Team Lead

• Monitor, triage and investigate security alerts
• Use Splunk to investigate security events
• Design, develop, automate and tune Splunk detection rules
• Build and enhance automation and AI-driven workflows
• Perform proactive threat hunting
• Support administration and optimization of SIEM platform (Splunk)
• Partner with Engineering and Technology teams for security best practices
• Participate in the On-Call Rota with the Team
• Produce documentation, dashboards and reporting

• Lead day‑to‑day SOC operations, ensuring effective triage, escalation, and communication workflows
• Act as the primary escalation point for complex security investigations and incidents
• Conduct advanced threat investigations across endpoints, networks, and cloud environments
• Perform proactive threat hunting and detection tuning to improve coverage and reduce noise
• Manage and mentor Tier 1–2 analysts, supporting development and technical growth
• Ensure ticket quality, SLA adherence, and high service standards across SOC operations
• Support onboarding of new customers into monitoring and detection platforms
• Collaborate with Cyber Security leadership to improve detection strategy and SOC maturity
• Analyse logs and security data to identify malicious or suspicious activity
• Develop and maintain playbooks, runbooks, and knowledge base content
• Produce clear, actionable incident reports for internal and customer stakeholders
• Engage directly with customers during escalations, incident reviews, and briefings
• Identify opportunities for automation, process improvement, and enhanced detection capabilities
• Stay up to date with emerging threats, attack techniques, and MITRE ATT&CK developments

Senior SOC Analyst

• Work with various stakeholders from across the group, to ensure security operations practices, policies, and systems are robust, pragmatic and aligned with strategic objectives.
• Define, build, and maintain a comprehensive security operations architecture that addresses current and emerging threats.
• Manage delivery of cyber security projects and co-ordinate business security initiatives to support the organisation’s security posture and strategic goals.
• Provide expert consultancy to technology teams on both reactive (day-to-day issues) and proactive (strategic) security matters.
• Maintain Security Operations documentation, records and evidence to support security assessments, audits, and compliance with legal, regulatory and customer requirements.
• Oversee and enforce adherence to technical security policies, standards, best practices, and customer requirements.
• Lead the monitoring, detection, and investigation of security events & alerts; maintain and improve security control automation, logging, alerting, vulnerability scanning and threat detection capabilities.
• Own incident response procedures; coordinate incident handling, ensure relevant stakeholders and third parties are engaged, lead follow-up actions until resolution.
• Manage and oversee security testing: internal automated technical controls capture and scans, third-party assessments, penetration tests, ensuring findings are tracked and remediated.
• Ensure security controls and processes are integrated across systems, applications, and cloud infrastructure.
• Develop KPIs, SLAs, dashboards to measure and report performance, including response times, false positives, remediation progress etc.
• Stay up-to-date with regulatory/compliance frameworks (e.g. EU Cyber Resilience Act, EU AI Act, ISO 27001, GDPR, PCI-DSS, NIST,NCSC), threat landscape changes and emerging technologies.
• Work across the organisation and beyond to promote best practice across Digital Science, making recommendations for improvements to cyber security practices in line with industry standards and learnings from security incidents.
• Prepare cyber security responses and evidence for internal and external parties.
• Take an active role in information security forums, councils and communities within and outside of the organisation.

• Responsible for identifying, mitigating and investigating suspicious cyber activity.
• Help maintain the University’s ability to deliver core teaching, learning and research digital services.
• Working as part of a small team of cyber security specialists, the role will be at the forefront of protecting the University digital estate from potential cyber threats and risks.

Senior Analyst – Cyber Security Operations

• Operationalize the London office physical security program, including access control, visitor management, contractor access, incident response, and office security operations.
• Manage security vendors and the contract guard force, including post orders, performance, coverage, KPIs / SLAs, and continuous improvement.
• Partner closely with Workplace / Facilities, HR, IT / InfoSec, Legal, EHS, GSOC, and office leadership to implement sensible, employee-friendly security controls.
• Lead local incident response and follow-through, including documentation, after-action reviews, and corrective actions.
• Support security planning for in-office events, leadership visits, and business travel into / out of London as needed.
• Drive emergency preparedness, including evacuation / muster processes, tabletop exercises, and drills in coordination with Workplace.

Security Operations jobs in United Kingdom

See all jobs on JobTailor

Security Operations Lead

Senior Director Analyst – Security Operations, Threat Detection, Response and Automation

SecOps Engineer

Security Engineer, Incident Response

SOC Operations Team Lead

SecOps Engineer

Senior SOC Analyst

Security Operations Lead

Senior Analyst – Cyber Security Operations

Corporate Security Operations Manager