Security Operations Engineer

Ellison Institute of Technology Oxford; Oxford; On-site; GBP 60,000 - 70,000; Full time

Benefits offered by this job

Salary £60,000-£70,000

Travel allowance

Bonus

Pension 7.5%

Private Medical Insurance

Cycle to Work

Nursery Salary Sacrifice

Life Assurance

Employee discounts

Electric car scheme

Neurodiversity support

Coaching & Therapy

Job summary

Ellison Institute of Technology Oxford is seeking an experienced Security Operations Engineer to protect our researchers, platforms and world-class facilities. You’ll join a growing cyber security team focused on monitoring, incident response, detection engineering and continuous improvement.

You’ll work with IT, governance and research computing to create a secure environment that enables scientific discovery and innovation to thrive.

Qualifications

• Experience in Security Operations, SOC, or incident response.
• Hands-on experience with SIEM platforms like Azure Sentinel, Splunk, Taegis.
• Familiarity with EDR tools such as SentinelOne or CrowdStrike.
• Understanding of MITRE ATT&CK and common threat techniques.
• Working knowledge of Windows and Linux; networking basics.

Responsibilities

• Operate security monitoring across endpoints, servers, cloud, and networks.
• Maintain and optimise SIEM/EDR and cloud security tooling for visibility.
• Investigate, triage and respond to security alerts with cross-functional teams.
• Support incident response, containment, remediation and recovery activities.
• Produce incident reports, lessons learned and root cause analyses.
• Contribute to detection rules and automation workflows.
• Use threat intelligence to strengthen monitoring and detection.
• Assist vulnerability management and remediation tracking.
• Collaborate with IT, research computing and governance teams to embed secure practices.
• Contribute to security documentation and audit readiness.

Skills

SOC experience

SIEM tooling

EDR solutions

MITRE ATT&CK

Windows & Linux

Cloud security

Analytical skills

Communication

Collaboration

Continuous learning

Tools

Azure Sentinel

Splunk

Sophos Taegis

Job description

Join us at EIT

At the Ellison Institute of Technology (EIT), we’re on a mission to translate scientific discovery into real world impact. We bring together visionary scientists, technologists, engineers, researchers, educators and innovators to tackle humanity’s greatest challenges in four transformative areas:

• Health, Medical Science & Generative Biology
• Food Security & Sustainable Agriculture
• Artificial Intelligence & Robotics

Join us at EIT

At the Ellison Institute of Technology (EIT), we’re on a mission to translate scientific discovery into real world impact. We bring together visionary scientists, technologists, engineers, researchers, educators and innovators to tackle humanity’s greatest challenges in four transformative areas:

• Health, Medical Science & Generative Biology
• Food Security & Sustainable Agriculture
• Climate Change & Managing CO₂
• Artificial Intelligence & Robotics

This is ambitious work - work that demands curiosity, courage, and a relentless drive to make a difference. At EIT, you’ll join a community built on excellence, innovation, tenacity, trust, and collaboration, where bold ideas become real-world breakthroughs. Together, we push boundaries, embrace complexity, and create solutions to scale ideas from lab to society. Explore more at www.eit.org.

Your Role

As EIT continues to expand its research programmes, digital platforms and scientific infrastructure, we are looking for an experienced and proactive Security Operations Engineer to help protect our people, platforms and world-class research.

This is an opportunity to play a meaningful role within a growing cyber security team, combining security monitoring, incident response, detection engineering and continuous improvement. You’ll work closely with colleagues across IT, research computing, governance and legal functions to help create a secure environment that enables scientific discovery and innovation to thrive.

We are looking for individuals who enjoy solving complex problems, collaborating with others and continuously developing their skills in an environment where security is viewed as a trusted partner to the organisation.

Whether your background comes from a Security Operations Centre, incident response team or another security discipline, you’ll have the opportunity to contribute, learn and grow while helping safeguard research that could shape the future.

Working as part of a collaborative cyber security team, you’ll help strengthen our security capabilities while supporting the scientists, researchers and technology teams delivering work with global impact.

• Help operate and continuously improve security monitoring across endpoints, servers, cloud platforms and networks
• Maintain and optimise security tooling, including SIEM, EDR and cloud security platforms, to improve visibility and detection capabilities
• Investigate, triage and respond to security alerts, working with colleagues to identify and address potential threats
• Support incident response activities, helping to coordinate containment, remediation and recovery efforts
• Produce clear and accurate documentation, including incident reports, lessons learned and root cause analyses
• Contribute to the development of detection rules, automation workflows and threat-based use cases
• Use threat intelligence and emerging security trends to strengthen monitoring and detection capabilities
• Support vulnerability management activities, including assessment, prioritisation and remediation tracking
• Partner with colleagues across IT, research computing and governance teams to embed secure ways of working
• Contribute to security documentation, audit preparation, compliance activities and risk assessments
• Share knowledge and support a culture of continuous learning and improvement across the team

Requirements

We recognise that great candidates may bring a variety of experiences and backgrounds. If you’re excited by the opportunity but don’t meet every requirement, we’d still encourage you to apply.

Essential Skills, Qualifications & Experience

• Experience working within Security Operations, a Security Operations Centre (SOC), Incident Response, or a similar cyber security function
• Hands-on experience using SIEM platforms such as Azure Sentinel, Splunk, Sophos Taegis, or equivalent technologies
• Familiarity with Endpoint Detection and Response (EDR) solutions such as SentinelOne, CrowdStrike or similar tools
• A good understanding of common cyber threats, attack techniques and detection methodologies, including familiarity with the MITRE ATT&CK framework
• Working knowledge of Windows and Linux operating systems, networking fundamentals and identity management technologies
• Experience supporting or securing cloud environments, ideally within a complex or enterprise setting
• Strong analytical and problem-solving skills, with the ability to investigate and respond to security events effectively
• The ability to communicate technical information clearly to both technical and non-technical audiences
• A collaborative approach and a desire to work closely with colleagues across a range of disciplines
• A commitment to continuous learning and professional development

Desirable Skills, Qualifications & Experience

• Experience with scripting or automation using Python, PowerShell, Bash or similar languages
• Experience working in research, higher education, healthcare, scientific or other innovation-focused environments
• Familiarity with SOAR platforms and security automation technologies
• Experience supporting organisations aligned to ISO27001:2022 or other recognised security frameworks
• Relevant certifications such as ISC2 Certified in Cybersecurity (CC), CompTIA Security+, CISSP, SSCP, CySA+, or similar
• Experience supporting large-scale data platforms, research computing environments or high-performance computing (HPC) infrastructure

What Will Help You Succeed

• Curious and motivated to learn
• Calm and methodical when solving problems
• Collaborative and supportive team players
• Comfortable building relationships across technical and non-technical teams
• Passionate about using technology to enable meaningful scientific and societal impact

Benefits

• Salary - £60,000 - £70,000 + travel allowance + bonus
• Enhanced holiday. Our annual leave allowance is 25 days plus 8 bank holidays and an additional 3 days between Christmas and New Year. You will also have the opportunity to purchase an additional 5 days annual leave in January and July.
• Pension - Employer contribution 7.5%, minimum employee contribution 5%
• Life Assurance.
• Income Protection
• Private Medical Insurance as standard for you, your partner and any dependents. Including hospital Cash Plan
• Employee discounts
• Electric car scheme
• Nursery Salary Sacrifice scheme
• Cycle to Work Scheme
• Family Planning
• Neurodiversity support including advise and assessments
• Coaching & Therapy services

Working Together - What It Involves

• You must have the right to work permanently in the UK with a willingness to travel as necessary. In certain cases, we can consider sponsorship, and this will be assessed on a case-by-case basis and volume of local applications
• You will live in, or within easy commuting distance of, Oxford (or be willing to relocate)