Hybrid SecOps Engineering Lead: Azure & SOC

RM Education; Abingdon; Hybride; GBP 90 000 - 130 000; Plein temps

Avantages offerts par ce poste

Private medical healthcare

Group Personal Pension Plan

Cycle to work scheme

Résumé du poste

RM Education is seeking a hands-on Security Engineering & SOC Lead to build and run Azure guardrails, SOC tooling, and platform hardening for a multi-tenant SaaS platform. You will lead security operations, detections, and the three-analyst team, troubleshooting issues and guiding engineering teams.

Essential experience includes security engineering/operations, Microsoft Sentinel, KQL, incident response on cloud platforms, and IaC with Terraform/Bicep.

Qualifications

• Solid experience in security engineering or security operations and leading a SOC.
• Hands-on Microsoft Sentinel administration and threat detection.
• Strong ability to map detections to MITRE ATT&CK and explain firing logic.
• Experience incident response on a cloud platform and Azure controls.
• DevSecOps tooling with GitHub Actions or Azure Pipelines and IaC.

Responsabilités

• Security engineering: implement Azure controls and guardrails.
• Run SOC operations: on-call, runbooks, incident handling.
• Analytics and monitoring: build SIEM dashboards and reports.
• Lead a team of three SOC analysts and drive development plans.
• Remediate findings and coordinate with engineering and architects.

Connaissances

Security engineering

SOC leadership

Microsoft Sentinel

KQL

Incident response

Azure security

DevSecOps

Terraform/Bicep

AKS security

OWASP

Outils

GitHub Actions

Azure Pipelines

Terraform

Bicep

Defender for Cloud

Sentinel

Entra ID

Azure Policy

Key Vault

AKS

Description du poste

RM Education is seeking a hands-on Security Engineering & SOC Lead to build and run Azure guardrails, SOC tooling, and platform hardening for a multi-tenant SaaS platform. You will lead security operations, detections, and the three-analyst team, troubleshooting issues and guiding engineering teams.

Essential experience includes security engineering/operations, Microsoft Sentinel, KQL, incident response on cloud platforms, and IaC with Terraform/Bicep.