Security Operations Specialist — Incident Response & SIEM

Evelyn Partners; Glasgow; Hybrid; GBP 40,000 - 70,000; Full time

Benefits offered by this job

Private medical insurance

Life assurance

Pension contribution

Generous holiday package

Shared parental leave

Job summary

Evelyn Partners in Glasgow is seeking a Security Operations Specialist to join the SOC. You will provide second and third line analysis and incident response for security events, working with external partners to ensure effective monitoring.

Reporting to the Security Operations Lead, you will support the SOC Manager in planning security controls, build relationships with Technology Services, and guide end users on best security practices.

Qualifications

• Previous experience in a Security Operations Centre (SOC).
• 3+ years in security operations or a technical security role with incident response and detection engineering.
• Strong understanding of SIEM, IAM and DLP, and Zero Trust networks.
• Experience managing security in an Azure/365-centric environment.
• Familiarity with MITRE ATT&CK and related frameworks.
• Active, ongoing interest in evolving threat landscape.

Responsibilities

• Respond to escalated security incidents in line with timescales.
• Coordinate with third party security vendors for monitoring and triage.
• Analyze security reports to identify trends and improve secure behaviours.
• Be a technical SME within the Cyber Incident Response team.
• Maintain phishing campaigns, reporting and remediation processes.
• Support security tooling across multiple vendors and regulatory requirements.

Skills

SOC experience

Incident response

MITRE ATT&CK

Azure/365

SIEM

DLP

Zero Trust

Threat modeling

Education

Bachelor's or Master’s in InfoSec/InfoSys/CS

Job description

Evelyn Partners in Glasgow is seeking a Security Operations Specialist to join the SOC. You will provide second and third line analysis and incident response for security events, working with external partners to ensure effective monitoring.

Reporting to the Security Operations Lead, you will support the SOC Manager in planning security controls, build relationships with Technology Services, and guide end users on best security practices.