Hands-On Security Ops Analyst: ISO 27001 & Vulnerability Mgmt

ONYX Insight; Nottingham; Hybrid; GBP 50,000 - 80,000; Full time

Job summary

ONYX Insight is seeking a hands-on Security Operations professional to lead day-to-day monitoring, vulnerability management, incident response, and internal audit activities within a small specialist team. You will coordinate with an external SOC/MDR and contribute to ISO 27001 compliance while avoiding governance-only duties.

The role sits in a growing IIoT context with global responsibilities and regulatory considerations across multiple regions, focusing on practical security delivery and

Qualifications

• 3-5 years of hands-on information security operations experience.
• Practical experience maintaining CSPM, SAST, and DAST tooling.
• Experience contributing to ISO 27001 or equivalent risk assessments.
• Experience working with external SOC or MDR providers.
• Strong written communication with ability to produce findings and risk entries.
• Hands-on, independent worker in a small team.

Responsibilities

• Operate as the primary hands-on resource for security monitoring, triage, and incident response.
• Maintain CSPM, SAST, and DAST tooling to defined standards.
• Coordinate vulnerability management and internal/external penetration testing.
• Conduct internal security audits and risk assessments with findings reports.
• Support ISO 27001 compliance activity including audit evidence.
• Produce audit-ready outputs: risk registers and policy updates.

Skills

Security operations

CSPM tooling

SAST

DAST

ISO27001 risk assessments

SOC/MDR collaboration

Education

CISSP

CISM

ISO27001 Lead Auditor

IEC 62443

Tools

AWS

Job description

ONYX Insight is seeking a hands-on Security Operations professional to lead day-to-day monitoring, vulnerability management, incident response, and internal audit activities within a small specialist team. You will coordinate with an external SOC/MDR and contribute to ISO 27001 compliance while avoiding governance-only duties.

The role sits in a growing IIoT context with global responsibilities and regulatory considerations across multiple regions, focusing on practical security delivery and