Security Operations Specialist — Hybrid & Incident Response

Cyber UK; Southampton; Hybrid; GBP 55,000 - 75,000; Full time

Benefits offered by this job

Hybrid working model

Competitive salary

Private medical insurance

Pension contribution

Generous holiday package

Shared parental leave

Job summary

Evelyn Partners is seeking a Security Operations Specialist to join the SOC in Liverpool, supporting the SOC Manager with planning and implementing security measures. You will work with external partners to ensure effective monitoring and the relevance of rulesets across the security stack.

The role focuses on incident response, phishing campaigns, and operational security across multiple technology vendors. Hybrid working is available with a competitive salary and benefits.

Qualifications

• Experience in a Security Operations Centre (SOC)
• Minimum 3 years in security operations or a technical security role
• Excellent understanding of SIEM, IAM and DLP and Zero Trust
• Experience in Azure/365-centric environment
• Experience analyzing cyber attacks using MITRE ATT&CK
• Ability to stay updated on evolving threat landscape

Responsibilities

• Respond to escalated security incidents with timelines and notify for further investigation
• Coordinate with third-party security vendors for monitoring and triage
• Analyze security reports to identify trends and inform secure behaviours
• Be part of the Cyber Incident Response team as a technical SME
• Deliver phishing campaigns, reporting and remediation management
• Maintain security tooling stack and update security policies and compliance

Skills

SOC experience

Security operations

SIEM/IAM/DLP

Azure/365

MITRE ATT&CK

Threat landscape awareness

Education

Bachelors/Masters in InfoSec

Certifications desirable

Tools

Azure/365

Job description

Evelyn Partners is seeking a Security Operations Specialist to join the SOC in Liverpool, supporting the SOC Manager with planning and implementing security measures. You will work with external partners to ensure effective monitoring and the relevance of rulesets across the security stack.

The role focuses on incident response, phishing campaigns, and operational security across multiple technology vendors. Hybrid working is available with a competitive salary and benefits.