Security Operations Engineer (79B0754)

Referment; Manchester; Hybrid; GBP 65,000 - 90,000; Full time

Job summary

Referment is partnering with a UK fintech to secure its cloud-first platform. You will join the Cyber Security team as a Security Operations Engineer, owning detection engineering, incident response and vulnerability management across cloud, endpoints, networks and applications.

The role is hands-on and collaborative, reporting to the Cyber Security Manager and working with Engineering. It is a hybrid role with 1-2 days per week in the Manchester office.

Qualifications

• Experience in Security Operations or Information Security.
• Hands-on scripting for automations and integrations.
• Experience with appsec testing методы and security tooling.

Responsibilities

• Monitor and improve security operations across cloud, endpoint, network and app environments.
• Lead investigation, triage and response to security incidents.
• Develop detections, automations and tooling for threat detection and response.
• Oversee vulnerability management end-to-end from scanning to remediation.
• Collaborate with Engineering to embed security across SDLC.
• Explore AI-powered tooling for proactive threat management.

Skills

Security Ops

Python/PowerShell

SAST/DAST/SCA

SIEM & IR

ISO27001/PCI DSS

Cross-team comms

Job description

Referment is working with a UK-based fintech that connects corporate finance and treasury teams directly with their banks, automating payments, collections, statement retrieval and cash management on one secure platform. You'll join the Cyber Security team as a Security Operations Engineer, working closely with the Cyber Security Manager and Engineering teams to protect the company's people, platform and customers. It's a hands-on role with real ownership: you'll run security operations across cloud, endpoint, network and application environments, and help embed security throughout the software development lifecycle in a secure-by-design culture.

The Role

• Monitor, manage and continually improve security operations across cloud, endpoint, network and application environments.
• Lead the investigation, triage and response to security incidents, minimising risk and improving resilience.
• Develop and optimise detection rules, automations and security tooling to strengthen threat detection and response.
• Coordinate vulnerability management end to end, from scanning and prioritisation through to remediation and reporting.
• Work with Engineering to identify vulnerabilities and embed security across the development lifecycle.
• Identify opportunities to leverage AI-powered security tooling and automation for proactive threat management.

What We're Looking For

• Experience in a Security Operations, Cyber Security or Information Security role.
• Strong scripting or programming skills (e.g. Python or PowerShell) for building automations and integrations.
• Hands-on experience with application security testing methodologies such as SAST, DAST, SCA and SBOM.
• Knowledge of security monitoring technologies, SIEM platforms, vulnerability management and incident response.
• Familiarity with frameworks and standards such as ISO 27001, PCI DSS, SOC 2, Cyber Essentials or SWIFT CSP.
• Clear communication, comfortable working across technical and non-technical teams.

Cloud security, security automation, Continuous Threat Exposure Management and AI-enabled security tooling experience would be advantageous, not essential.

This could suit a SOC or security analyst who has outgrown alert triage and wants broader ownership of detection engineering, incident response and vulnerability management in a modern cloud-first fintech. The role is hybrid, with 1-2 days a week in the Manchester office.

#Referment