Security Operations Analyst

Zopa Bank; Greater London; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Zopa is looking for a Security Operations specialist to protect our banking platforms and customers. You will triage alerts, investigate incidents, and work across IT, engineering and fraud teams to strengthen defenses.

You will develop hands-on expertise with security tools, threat hunting, and vulnerability management in a hybrid London-based role, with options for flexible remote days and collaboration with a diverse team.

Qualifications

• Experience in security operations or similar technical environments.
• Ability to review alerts or analyze logs for unusual activity.
• Familiarity with incident response lifecycle and procedures.
• Foundational knowledge of Windows, macOS, Linux, and networking.

Responsibilities

• Review, triage and investigate security alerts, events and incident tickets.
• Analyse security logs to identify suspicious activity and assess impact.
• Investigate phishing, malware and account compromise scenarios.
• Follow incident response playbooks, escalating as needed.
• Maintain investigation notes and incident documentation.
• Collaborate with IT, engineering, fraud and customer-service teams.

Skills

Security operations

Incident response

Threat analysis

Log analysis

Communication

Tools

Splunk

SentinelOne

Netskope

AWS IAM

Git

Job description

Hello there. We’re Zopa.

We started our journey back in 2005, building the first ever peer-to-peer lending company. Fast forward to 2020 and we launched Zopa Bank. A bank that listens to what our customers don’t like about finance and does the opposite. We’re redefining what it feels like to work in finance. Our vision for a new era of banking puts people front and centre — we’ve built a business that empowers everyone to aim high, every day, to move finance forward. Find out more about our fantastic offerings at Zopa.com !

Our Story

Hello there. We’re Zopa.

We started our journey back in 2005, building the first ever peer-to-peer lending company. Fast forward to 2020 and we launched Zopa Bank. A bank that listens to what our customers don’t like about finance and does the opposite. We’re redefining what it feels like to work in finance. Our vision for a new era of banking puts people front and centre — we’ve built a business that empowers everyone to aim high, every day, to move finance forward. Find out more about our fantastic offerings at Zopa.com !

We’re incredibly proud of our achievements and none of it would be possible without the amazing team here. It’s not just industry awards we’re winning, we’ve also been named in the top three UK’s Most Loved Workplaces.

If you embrace unconventional challenges, are unafraid to think differently and are driven to make an outsized impact, you’ll thrive here at Zopa, so join us, and make it count. Want to see us in action? Follow us on Instagram @zopalife

The Team

At Zopa, our Security Operations team plays an important role in protecting our banking services, systems and customers. We're a collaborative team with a mix of technical experience and professional backgrounds, working together to investigate security threats, respond to incidents and continuously improve how we operate.

Unlike traditional SOC teams focused solely on monitoring and incident response, our SecOps team also owns and manages a range of security tools and services. That means you'll have opportunities to develop experience beyond alert investigation, including vulnerability management, cloud security and other security technologies.

You’ll work alongside experienced analysts who share their knowledge and support your development. You'll also collaborate with engineering, IT, fraud and customer-facing teams to understand and respond to security risks across the business.

A Day In The Life

• Review, triage and investigate security alerts, events and incident tickets.
• Analyse security logs to identify suspicious activity, assess potential impact and determine appropriate next steps.
• Investigate common threats including phishing, malware and account compromise.
• Follow established incident response playbooks, escalating incidents and requesting support when needed.
• Maintain accurate investigation notes, ticket updates and incident documentation.
• Work within defined response and resolution expectations for security tickets.
• Collaborate with IT Services, Identity and Access Management, engineering, fraud and customer service teams.
• Develop practical experience with security technologies including Splunk, SentinelOne, Netskope and AWS security services.
• Participate in peer reviews and incident retrospectives, sharing lessons learned with colleagues.
• Support improvements to security processes and develop your understanding of vulnerability management, cloud security and security tooling.

About You

You have practical experience in security operations or a relevant technical environment such as infrastructure, network, cloud operations or IT support, along with a blend of the following:

• Understanding of cyber security fundamentals, including phishing, malware, account compromise, vulnerabilities, threats and risks.
• Experience reviewing security alerts or analysing logs to investigate unusual activity.
• Knowledge of the incident response lifecycle and can follow documented procedures.
• Foundational knowledge of Windows, macOS, Linux and core networking concepts.
• Understand basic cloud concepts, particularly AWS services such as IAM, S3 and CloudTrail.
• You approach investigations analytically, gathering evidence and assessing potential impact before deciding what to do next.
• Communication is one of your strengths; you communicate clearly, document your findings accurately and know when to elevate.
• You can prioritise security tickets, manage your time and work within agreed service levels.
• You're curious, eager to learn, comfortable asking for support and committed to working collaboratively.

Added Bonus

• Experience using SIEM, EDR or security tools such as Splunk, SentinelOne, Netskope, Mimecast, Tenable or AWS GuardDuty.
• Basic scripting experience using Python, Bash or PowerShell.
• Practical experience with phishing investigations or vulnerability management.
• Familiarity with the MITRE ATT&CK framework.
• Experience using Git or version control alongside engineering teams.
• Experience working in financial services, fintech or another regulated environment.
• Awareness of FCA requirements and UK GDPR.
• Security certifications such as CompTIA Security+, CySA+ or CEH, or a relevant degree.
• Experience safely using AI tools to support everyday work.

At Zopa we value flexible ways of working.

We value face-to-face collaboration and a good work-life balance. This hybrid role requires you to come to our London office 2-3 days a week.

You’ll also have the option of working from abroad for up to 120 days a year! But no matter where you are, we’ll make sure you’ve got everything you need to thrive, both in your work and home life, from day one.

• Subject to having the right to work in the country of choice

Diversity Statement

Zopa is proud to offer a workplace free from discrimination. Diversity of experience, perspectives, and backgrounds leads to better products for our customers and a unique company culture for our people. We are made up of nearly 50 nationalities, have a DE&I forum made up of Zopians wanting to make a difference and we are proud of our culture where everyone can bring their full self to work. Our approach to DE&I is reflected in our hiring process so please let us know if you require any reasonable adjustments.

Our approach to AI in interviews

At Zopa, AI isn't something we're testing out — it's part of how we work every day. As a proud partner of Jobs 2030 , we're committed to building AI fluency across our workforce, and we expect Zopians to use AI as part of how they do their jobs.

Because of that, we want to be transparent about how we think about AI use during our hiring process.

Behavioural and competency-based interviews

please don't use AI . These conversations are designed to understand you — your experiences, your judgment, and how you've approached real situations. An AI-generated answer can't tell us that. What it can do is get in the way of us finding out whether we're the right fit for each other.

Technical interviews:

it depends on the role. Some technical stages actively welcome AI use, others don't. Your Talent Partner will let you know what's expected at each stage. Where AI is part of the assessment, we'll be interested not just in the outcome, but in how you used it – the tools you chose, your reasoning, and the decisions you made along the way.