Security Operations Specialist — Incident Response & SOC Expert

SmartRecruiters, Inc.; Liverpool; Hybrid; GBP 50,000 - 70,000; Full time

Benefits offered by this job

Private medical insurance

Life assurance

Pension contribution

Generous holiday package

Additional holiday

Shared parental leave

Job summary

Evelyn Partners is seeking a Security Operations Specialist to join the Security Operations Centre (SOC) in Liverpool on a 12-month fixed term contract. You will perform second and third line reviews, analysis, and incident response for security events, supporting external security partners and guiding end users in best practices across the business.

The role requires strong experience in security operations, incident response, and detection engineering, with a focus on Azure/365 environments

Qualifications

• Experience in a Security Operations Centre (SOC).
• 3+ years in security operations or a technical security role with focus on attack paths and mitigations.
• Strong understanding of security operations, incident response and detection engineering.
• Knowledge of SIEM, IAM, DLP and Zero Trust concepts.
• Experience in Azure/365-centric environments.
• Familiarity with MITRE ATT&CK and other frameworks.
• Bachelor's/Master's in InfoSec/Computing or equivalent.

Responsibilities

• Respond to escalated security incidents within defined timescales.
• Coordinate with third party security vendors for monitoring and triage of alerts.
• Analyze security reports to identify trends and drive secure behaviours.
• Serve as SME within the Cyber Incident Response team.
• Maintain phishing campaigns, reporting and remediation management.
• Oversee security tooling across vendors and ensure compliance with security policies.

Skills

3+ years security operations

SOC experience

SIEM

IAM

DLP

Azure/365

MITRE ATT&CK

threat landscape awareness

Education

Bachelor's or Master's in InfoSec/InfoSys/CS

Tools

SIEM

Azure

DLP

Job description

Evelyn Partners is seeking a Security Operations Specialist to join the Security Operations Centre (SOC) in Liverpool on a 12-month fixed term contract. You will perform second and third line reviews, analysis, and incident response for security events, supporting external security partners and guiding end users in best practices across the business.

The role requires strong experience in security operations, incident response, and detection engineering, with a focus on Azure/365 environments