Security Analyst II

User Testing Limited; City of Edinburgh; On-site; GBP 65,000 - 90,000; Full time

Job summary

Auros is seeking a Security Operations specialist to be the first point of contact for the Security queue, triaging, prioritising and routing tickets, and automating recurring requests.

Triage endpoint and security alerts with runbooks and AI-assisted analysis, escalate when needed, and drive continuous improvement by analyzing alert volume and tuning detections with owning teams.

Qualifications

• 3 years of experience in security, IT, compliance, or a customer-facing technical role.
• Experience using AI to automate work and build AI agents.
• Ability to explain technical topics to non-technical audiences.
• Comfortable interfacing with customers and internal teams.

Responsibilities

• Triage, prioritise and route security tickets and requests.
• Triage endpoint and security alerts using runbooks and AI analysis.
• Analyze alert volume and tune detections with owning teams.
• Assist incident response and draft internal security notices.
• Review AI-drafted responses to security questionnaires and RFPs.
• Maintain Trust Center responses and access requests.
• Join customer calls to explain Auros security posture.
• Run first-pass vendor security reviews and summarize docs.
• Review new software and AI tools for approval.
• Build automations across security tools.
• Define and track metrics like time to triage and resolution.

Skills

Communication skills

Customer interaction

Organization

Self-starter

AI automation

Security operations

Incident response

Security/IT experience

Tools

Jira Service Management

SIEM/alerting tools

DLP

Endpoint security

Job description

We're Auros- the leader in human insight. Our mission is to help organizations craft exceptional customer experiences through fast, actionable feedback. We empower teams to build the best products and experiences by embedding real human perspectives into every stage of the development process-from ideation to launch. With the world's strongest participant network, AI-powered analysis, expert services, and seamless integrations, we help companies eliminate guesswork, align stakeholders, and bring customer needs into sharp focus. Trusted by more than 3,000 organizations worldwide—including 75 of the Fortune 100- Auros delivers measurable business outcomes, reduces risk, and helps teams deliver with confidence. Joining our team means being part of a passionate group focused on transforming how companies understand and connect with their customers. Let's build experiences people love- together.

Role Overview

Act as an initial point of contact for the Security queue: triage, prioritize and route tickets, resolve routine requests and elevate the rest, and automate the handling of recurring request types.

Triage endpoint and security alerts and DLP events using runbooks and AI-assisted analysis, following up with employees and escalating real issues.

Own the continuous improvement of this process by analyzing alert volume and false-positive rates, tuning detections with the owning teams, and automating enrichment and first-pass triage.

Participate in incident response, including triage of employee-reported phishing and social engineering attempts and drafting internal security notices, and drive the follow-up after each incident: post-incident reviews, runbook updates, and process or tooling changes.

Review, validate and refine AI-drafted responses to security questionnaires, RFPs and due diligence requests for Sales, pulling in subject matter experts when needed.

Keep the answer library, standard responses and Trust Center documents accurate as the source of truth for those responses, and handle Trust Center access requests.

Join customer calls to walk through Auros’s security posture, with support from senior team members.

Run first-pass vendor security reviews as part of third-party risk management, using AI to summarize vendor documentation and flag gaps.

Review requests for new software, browser extensions and AI tools against the approval process, and route AI requests through the AI use case intake.

Support access checks, customer data deletion requests, reporting of impersonation or fraudulent domains, and internal and external audits.

Build and maintain automations, AI agents and integrations across our security tools to cut manual work, and keep runbooks current as living documents that both people and AI tooling can execute.

Define and track operational metrics such as time to triage, time to resolve and questionnaire turnaround, and use them to prioritize improvements, pilot new tools or ways of working, and show their impact.

Demonstrate Auros’s values through work product and day-to-day team interactions.

Required Skills/Abilities

• Strong written and verbal communication skills, including writing clear, accurate answers for customers and explaining technical topics to non-technical audiences.
• Comfortable working directly with customers and internal teams.
• Highly organized, able to manage multiple requests and deadlines and see work through to completion.
• Self-starter who works independently, follows runbooks and knows when to escape, and also spots what isn't working and takes the initiative to fix it.
• Experience using AI to automate work, ideally including building AI agents or agent-like workflows that took on repetitive tasks and made a team measurably more efficient.
• Technical foundation in security operations (e.g. alerting, endpoint, identity and access management) and incident response fundamentals, enough to understand and explain Auros's overall security posture.
• 3 years of experience in security, IT, compliance, or a customer-facing technical role (e.g. support or solutions).

Desirable but not required

• Familiarity with security frameworks such as SOC 2, ISO 27001 or NIST CSF.
• Experience completing security questionnaires (SIG, CAIQ) or using compliance tools such as Vanta.
• Experience with ticketing systems such as Jira or Jira Service Management.
• Exposure to DLP, endpoint security or SIEM/alerting tools, including detection or alert tuning.
• Experience building AI agents, automations or integrations (e.g. SOAR or workflow automation platforms), or scripting against security tool APIs.
• Entry-level certification such as CompTIA Security+ or ISC2 CC.

Physical Requirements

N/A

Other duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice. Don’t meet every single requirement but excited about the role? We encourage you to apply. Research shows that some candidates are less likely to apply unless they meet 100% of the qualifications—but you may be exactly who we’re looking for. Diverse perspectives drive innovation, and we’re committed to building a team with a wide range of backgrounds, experiences, and skills.

Auros is an Equal Opportunity Employer and a participant in the U.S. Federal E-Verify program. Women, minorities, individuals with disabilities and protected veterans are encouraged to apply. We welcome people of different backgrounds, experiences, abilities and perspectives. Auros will consider qualified applicants with criminal histories in a manner consistent with the San Francisco Fair Chance Ordinance, as applicable. We enable enterprises to understand their customers' perspectives, delivering authentic customer insights quickly and reliably. We are builders and listeners who move fast, think deeply, and act with intention. We operate at the intersection of technology and empathy, helping the world's leading brands replace guesswork with confidence. Nothing meaningful is built in isolation. Not great products. Not great companies. And not great cultures. We're creating an environment where curiosity is expected, impact is shared, and human understanding isn't just what we sell. It's how we work. The same curiosity and empathy we bring to understanding our customers, we bring to understanding each other. Building better products starts with building a culture where people feel seen, heard, and valued.

Community in action

Our Employee Resource and Affinity Groups create spaces for connection, dialogue, and shared learning across our global team. They amplify voices, strengthen leadership, and ensure diverse perspectives shape the decisions we make every day.

Learn more here