Security Operations Engineer

Ellison Institute of Technology; Town of Oxford; On-site; CAD 132,000 - 169,000; Full time

Benefits offered by this job

Travel allowance

Private medical insurance

Pension

Job summary

Ellison Institute of Technology (EIT) seeks a proactive Security Operations Engineer to protect researchers, platforms, and data. This hands-on role centers on monitoring, incident response, detection engineering, and improving the security posture across endpoints, servers, and cloud environments.

You will collaborate with IT, governance, and legal teams to enable secure innovation and safeguard breakthrough research in a mission-driven environment.

Qualifications

• Experience in Security Operations, SOC, or Incident Response.
• Hands-on with SIEM platforms (Azure Sentinel, Splunk, or Taegis).
• Familiarity with EDR tools such as SentinelOne or CrowdStrike.
• Strong understanding of MITRE ATT&CK techniques.
• Working knowledge of Windows, Linux, identity systems, and networking.
• Experience securing cloud environments (OCI preferred).

Responsibilities

• Operate and enhance security monitoring across endpoints, servers, cloud, and networks.
• Tune and maintain SIEM tools to improve detection accuracy.
• Investigate security alerts and respond to incidents.
• Produce incident reports and root-cause analyses.
• Develop detection rules, automation, and threat-based use cases.
• Apply threat intel to improve detection in research environments.
• Support vulnerability scanning and remediation tracking.
• Collaborate with stakeholders to embed secure practices.
• Contribute to runbooks, audits, and risk assessments.

Skills

Security Operations

SIEM expertise

EDR tools

MITRE ATT&CK knowledge

Windows

Linux

Cloud security

Networking basics

Tools

Azure Sentinel

Splunk

Sophos Taegis

SentinelOne

CrowdStrike

OCI security tooling

Job description

At the Ellison Institute of Technology (EIT), we’re on a mission to translate scientific discovery into real world impact. We bring together visionaryscientists, technologists, engineers, researchers, educators and innovatorsto tackle humanity’s greatest challenges in four transformative areas:

• Health, Medical Science & Generative Biology
• Food Security & Sustainable Agriculture
• Climate Change & Managing CO₂
• Artificial Intelligence & Robotics

This is ambitious work - work that demands curiosity, courage, and a relentless drive to make a difference. At EIT, you’ll join a community built on excellence, innovation, tenacity, trust, and collaboration, where bold ideas become real-world breakthroughs. Together, we push boundaries, embrace complexity, and create solutions to scale ideas from lab to society. Explore more at www.eit.org.

Your Role:

At EIT we are seeking a proactive Security Operations Engineer with demonstrable experience to help protect our people, platforms, and world‑class research. This is a hands‑on, impactful role at the centre of our cyber‑security function, combining monitoring, incident response, detection engineering, and continuous improvement of our security posture.

You will work closely with IT, research computing, governance, and legal teams to ensure that security enables, not hinders scientific innovation. If you want to be part of a mission‑driven environment and play a critical role in safeguarding breakthrough research, we’d love to hear from you.

Your Responsibilities:

In this role, you will:

• Operate and continuously enhance security monitoring across endpoints, servers, cloud platforms, and networks.
• Tune and maintain SIEM tools (including Sophos Taegis, SentinelOne EDR, and OCI security tooling) to improve detection accuracy.
• Investigate and triage security alerts, escalating and responding appropriately.
• Act as a responder for security incidents, supporting containment, eradication, and recovery.
• Produce clear incident documentation, including reports and root‑cause analysis.
• Develop and refine detection rules, automation workflows, and threat‑based use cases.
• Apply threat intelligence to improve detection coverage in complex research environments.
• Support vulnerability scanning, prioritisation, and remediation tracking.
• Collaborate closely with stakeholders to embed secure practices into day‑to‑day operations.
• Contribute to runbooks, documentation, audits, compliance activities, and risk assessments.

Essential Skills, Qualifications & Experience:

• Experience working in Security Operations, a SOC, or in Incident Response.
• Hands‑on experience with SIEM platforms such as Azure Sentinel, Splunk, or Sophos Taegis.
• Familiarity with EDR tools including SentinelOne or CrowdStrike.
• A strong understanding of common attack techniques (MITRE ATT&CK).
• Working knowledge of Windows, Linux, identity systems, and networking.
• Experience working with cloud platforms (OCI preferred) in a security context.

Desirable Skills, Qualifications & Experience:

• Scripting or automation skills (Python, PowerShell, Bash).
• Experience in research, higher education, healthcare, or similarly open computing environments.
• Familiarity with SOAR tooling or automation platforms.
• Experience with ISO27001:2022 or similar standards.
• Relevant certifications (e.g., ISC2 CC, CompTIA Security+).

Our Benefits:

• Salary: Competitive salary (dependent on experience) + travel allowance + bonus
• Enhanced holiday + options to buy additional days
• Pension
• Life Assurance
• Income Protection
• Private Medical Insurance
• Hospital Cash Plan
• Therapy Services
• Perk Box
• Electric Car Scheme
• Childcare benefit

Working Together – What It Involves:

• You must have the right to work permanently in the UK with a willingness to travel as necessary. In certain cases, we can consider sponsorship, and this will be assessed on a case‑by‑case basis.
• You will live in, or within easy commuting distance of, Oxford (or be willing to relocate).