Security Operations Engineer: Detection, IR & Automation

Referment; Manchester; Hybrid; GBP 65,000 - 90,000; Full time

Job summary

Referment is partnering with a UK-based fintech to protect its people, platform and customers. You’ll join the Cyber Security team as a Security Operations Engineer, working closely with the Cyber Security Manager and Engineering teams.

It's a hands-on role with real ownership: you’ll run security operations across cloud, endpoint, network and application environments, and embed security throughout the software development lifecycle in a secure-by-design culture.

Qualifications

• Experience in a Security Operations, Cyber Security or Information Security role.
• Hands-on experience with application security testing methodologies such as SAST, DAST, SCA and SBOM.
• Knowledge of security monitoring technologies, SIEM platforms, vulnerability management and incident response.
• Clear communication, comfortable working across technical and non-technical teams.

Responsibilities

• Monitor and improve security operations across cloud, endpoint, network and app environments.
• Lead investigation, triage and response to security incidents.
• Develop detection rules, automation and security tooling.
• Coordinate vulnerability management end to end, from scanning to remediation.
• Collaborate with Engineering to embed security across the development lifecycle.
• Identify opportunities to leverage AI-powered security tooling and automation for proactive threat management.

Skills

Python

PowerShell

Automation

Threat detection

Tools

SIEM

SAST

DAST

SCA

SBOM

Vulnerability management

Job description

Referment is partnering with a UK-based fintech to protect its people, platform and customers. You’ll join the Cyber Security team as a Security Operations Engineer, working closely with the Cyber Security Manager and Engineering teams.

It's a hands-on role with real ownership: you’ll run security operations across cloud, endpoint, network and application environments, and embed security throughout the software development lifecycle in a secure-by-design culture.