Security Operations Engineer

Cantor Fitzgerald; Greater London; On-site; GBP 45,000 - 65,000; Full time

Job summary

A financial services company in Greater London is seeking a Security Operations Specialist. This role involves monitoring security events, developing response procedures, and maintaining cloud security. Ideal candidates will have a Bachelor's in Cybersecurity and extensive experience in security operations, Linux administration, and incident response. Key skills include familiarity with SIEM tools and AWS/Azure management. This position offers competitive compensation within a dynamic environment.

Qualifications

• At least five years of Security Operations experience.
• At least three years of Linux Administration.
• At least two years of Cloud (AWS or Azure) Administration.

Responsibilities

• Monitor, analyze, and respond to security events and incidents.
• Develop and maintain detection rules, playbooks, and automation scripts.
• Perform threat hunting and forensic investigations.

Skills

Linux and Windows OS

DNS

Certificate Management: Digicert, AppViewX

Experience with ticket management solutions

Experience with PMO tools such as Jira

SIEM and SOAR technologies (Splunk, Cribl)

Configure and troubleshoot EDR/Microsoft Defender

Azure Security Center

AWS and Azure (IAM, IaaS, PaaS)

Knowledge in KQL queries and SPL

Network packet analysis using Wireshark

Collaboration and communication skills

Education

Bachelor's Degree in MIS, CIS, Cybersecurity or similar

Tools

Splunk

Azure Sentinel

ServiceNow

Dynamics 365

Remedy

PowerShell

Python

Job description

Responsibilities

• Monitor, analyze, and respond to security events and incidents using SIEM and other security tools.
• Develop and maintain detection rules, playbooks, and automation scripts to improve incident response efficiency.
• Perform threat hunting and forensic investigations across IT environment.
• Collaborate with infrastructure and application teams to ensure secure configurations and compliance.
• Maintain and improve endpoint protection, intrusion detection/prevention systems.
• Document incident response procedures and contribute to post‑incident reviews.
• Create network diagrams and as‑built documents.
• Develop and maintain a strong partnership with relevant global businesses and technical leaders and teams, including 3rd parties and affiliate businesses.
• Stay current with emerging threats, vulnerabilities, and security technologies.

Education & Experience

• Bachelor's Degree in MIS, CIS, Cybersecurity or similar.
• At least five years of Security Operations.
• At least three years of Linux Administration.
• At least two years of Cloud (AWS or Azure) Administration.

Must‑Have Skills

• Linux and Windows OS.
• DNS.
• Certificate Management: Digicert, AppViewX.
• Experience with ticket management solutions: Dynamics 365, ServiceNow, Remedy, etc.
• Experience with PMO tools such as Jira, Smartsheet, Monday.com, etc.
• SIEM and SOAR technologies (Splunk, Cribl, Azure Sentinel).
• Configure and troubleshoot EDR/ Microsoft Defender for Endpoint, vulnerability management, and threat detection systems, with focus on Linux OS.
• Azure Security Center and Office 365 Compliance Portal.
• AWS and Azure (IAM, IaaS, PaaS).
• Knowledge in KQL queries in Sentinel and/or SPL in Splunk for developing use cases, dashboards, custom rules, custom parsers.
• Intermediate understanding of services and protocols commonly used in hosting environments: web servers, database servers, active directory protocols.
• Understanding of network packet analysis using tools such as Wireshark and TCPDump.
• Collaboration and communication skills across multiple teams and businesses.

Good‑to‑Have Skills

• Relevant certifications such as AWS Security Specialty, CISA, CISM, GIAC, Security+, or CISSP.
• Palo Alto Cortex suite of tools.
• Network technologies: switching, routing, wireless.
• PowerShell and Python Scripting.
• Power BI and Power Automate.
• Integrating security systems via API, etc.

Job Info

• Job Identification 246296
• Posting Date 10/14/2025, 12:17 PM
• Locations Five Churchill Place, London, Canary Wharf, E14 5HP, GB