Security Operations Analyst

GoCardless; Greater London; On-site; GBP 62,400 - 93,600; Full time

Benefits offered by this job

Wellbeing – dedicated support and med

Work away scheme – up to 90 days away

Adaptive Working – flexible work

Equity for permanent employees

Parental leave – aligned with needs

Learning budget – development funding

Generous holiday + volunteer days + 4

Job summary

GoCardless is seeking a Security Operations Analyst to own and evolve our security detection and response capabilities. You will help define use cases, monitor across SIEM/EDR/DLP, and respond to incidents, shaping security into day-to-day operations.

Your background should include incident response and threat management experience. You will work with cross‑functional teams to improve the organisation's security posture, using automation and data‑driven analytics to detect anomalies and drive

Qualifications

• Experience using SIEM tools to develop security monitoring cases and writing scripts to automate tasks.
• Demonstrable ability in using EDR, email analysis, and other security tools.
• Good fundamental knowledge of information security.
• Previous incident response experience.

Responsibilities

• Work closely with the Security Operations manager and team members to take a data‑driven approach to presenting security posture.
• Analyze logs from multiple sources (SIEM, EDR, DLP, email) to identify and investigate security events and anomalies.
• Run day‑to‑day security operations activities.
• Provide technical support for first responders during normal business hours and, when absolutely required, outside of working hours.

Skills

SIEM & monitoring

EDR & threat detection

Incident response

Scripting/Automation

Email analysis

Tools

SIEM tools

EDR tooling

DLP tooling

Email analysis tools

Scripting languages (PowerShell/Python)

Job description

Security Operations Analyst

As a Security Operations Analyst you will provide subject matter expertise on our security detection and response capabilities. You will be involved in the end‑to‑end process of Security Operations—from defining security use cases through to incident response. Your background will ideally be in security operations, with experience using SIEM tools to develop security monitoring cases, writing scripts to automate tasks, and previous experience in incident response and threat management. You’ll help make security part of day‑to‑day operations, working across teams, functions, and groups to improve the organization’s security posture.

Responsibilities

• Work closely with the Security Operations manager and team members to take a data‑driven approach to presenting security posture.
• Analyze logs from multiple sources (SIEM, EDR, DLP, email) to identify and investigate security events and anomalies.
• Run day‑to‑day security operations activities.
• Provide technical support for first responders during normal business hours and, when absolutely required, outside of working hours.

Qualifications

• Experience using SIEM tools to develop security monitoring cases and writing scripts to automate tasks.
• Demonstrable ability in using EDR, email analysis, and other security tools.
• Good fundamental knowledge of information security.
• Previous incident response experience.

Salary

Base salary range: £62,400 – £93,600.

Benefits

• Wellbeing – dedicated support and medical cover.
• Work away scheme – option to work away from your country of residence for up to 90 days in any 12‑month period.
• Adaptive Working – flexible work arrangements around your lifestyle.
• Equity – all permanently employed employees receive equity.
• Parental leave – aligned with everyone's needs.
• Learning budget – annual budget to support your development.
• Time off – generous holiday allowance plus 3 annual volunteer days and 4 annual business‑wide wellness days.

We don’t expect you to meet every requirement; if you’re excited by this role, we encourage you to apply.