SecOps Engineer — Incident Response & Detection London

MRP Global; Greater London; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

MRP Global is seeking an experienced SecOps Engineer to join our security operations team in London. The role focuses on security monitoring, incident response, and proactive improvements to security controls across a global technology environment.

The position is a 6 months+ contract with potential extensions and a hybrid work pattern requiring 2 days on-site per week in London. Responsibilities include tuning detection rules, managing SIEM and vulnerability management tooling, and supporting

Responsibilities

• Monitor and investigate security alerts, supporting triage, containment, investigation, and resolution of incidents.
• Configure, maintain, optimise, and troubleshoot security tooling (SIEM, endpoint protection, vulnerability management, and related platforms).
• Develop, tune, and maintain detection rules, alerting, use cases, and response playbooks to improve threat detection and reduce false positives.
• Support incident response activities, including investigation, containment, remediation, and post-incident analysis.
• Support vulnerability management activities, working with infra, cloud, and app teams to identify, prioritise, and remediate vulnerabilities.
• Analyse security events to identify threats, suspicious activity, and weaknesses across the tech environment.
• Contribute to security automation initiatives, developing scripts, workflows, and operational processes.
• Support continuous improvement of security monitoring, detection, response, and processes.

Job description

MRP Global is seeking an experienced SecOps Engineer to join our security operations team in London. The role focuses on security monitoring, incident response, and proactive improvements to security controls across a global technology environment.

The position is a 6 months+ contract with potential extensions and a hybrid work pattern requiring 2 days on-site per week in London. Responsibilities include tuning detection rules, managing SIEM and vulnerability management tooling, and supporting