Security Operations Engineer: Cloud & Incident Response

Referment; Manchester; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

Referment is working with a UK-based fintech to strengthen its Cyber Security team. You’ll join the Cyber Security team as a Security Operations Engineer, collaborating with the Cyber Security Manager and Engineering, protecting people, platform, and customers.

It’s a hands-on role with ownership across cloud, endpoint, network and application security, embedding security throughout the software development lifecycle in a secure-by-design culture.

Qualifications

• Experience in Security Operations, Cyber Security or Information Security.
• Strong scripting or programming skills (Python/PowerShell) for automations.
• Hands-on with SAST/DAST/SCA/SBOM for application security testing.
• Knowledge of SIEM, vulnerability management and incident response.
• Familiarity with ISO 27001, PCI DSS, SOC 2 or Cyber Essentials.
• Clear communication across technical and non-technical teams.

Responsibilities

• Monitor and continually improve security operations across cloud, endpoints, networks, and apps.
• Lead investigation, triage and response to security incidents, minimising risk.
• Develop and optimise detection rules, automations and tooling.
• Coordinate vulnerability management from scanning to remediation.
• Work with Engineering to embed security across the development lifecycle.
• Identify opportunities to leverage AI-powered security tooling.

Skills

Security Operations

Python/PowerShell

SAST/DAST/SCA/SBOM

SIEM

ISO 27001/PCI DSS

Cross-functional communication

Job description

Referment is working with a UK-based fintech to strengthen its Cyber Security team. You’ll join the Cyber Security team as a Security Operations Engineer, collaborating with the Cyber Security Manager and Engineering, protecting people, platform, and customers.

It’s a hands-on role with ownership across cloud, endpoint, network and application security, embedding security throughout the software development lifecycle in a secure-by-design culture.