Security Specialist - Cyber Operations

MORTGAGE ADVICE BUREAU LIMITED; East Midlands; Hybrid; GBP 45,000 - 65,000; Full time

Benefits offered by this job

Private medical insurance

25 days annual leave plus birthday off

Pension matching (L&G)

Share save scheme

Retail discounts

Entertainment tickets

Flexible hybrid working

Learning & Development opportunities

Inclusive, supportive culture

Job summary

Mortgage Advice Bureau Limited is seeking a hands-on cyber security professional to join a collaborative team spanning Security Operations, Cyber Engineering and Threat Management. You’ll help investigate alerts, improve detections, and support playbooks while contributing to a growing cyber capability across the organisation.

You’ll work with an MSSP, drive KPI/KRI reporting, and participate in an on-call rota to ensure security incidents are contained and remediated effectively.

Qualifications

• Experience working within a SOC, Cyber Operations, Security Engineering or Incident Response environment.
• Strong experience monitoring and investigating cyber security events.
• Experience maintaining and administering security technologies, tooling and controls.
• Knowledge of threat hunting, protective monitoring, detection engineering and incident response.
• Experience working within a regulated environment, with Financial Services experience advantageous.
• A strong understanding of modern cyber threats and defensive security practices.
• Experience working with SIEM platforms and security monitoring tools.
• Strong analytical and problem-solving skills.
• Excellent stakeholder management and communication skills.
• Relevant cyber security certifications and qualifications.
• The ability to communicate technical concepts clearly to technical and non-technical audiences.
• A calm and methodical approach when managing incidents and working under pressure.
• A self-starting approach, with the ability to work independently as well as collaboratively within a highly technical cyber security team.
• A continuous improvement mindset and a passion for cyber security.
• Enjoy variety and exposure across multiple areas of cyber security.
• Like combining security operations with hands-on engineering activities.
• Enjoy identifying opportunities to improve processes, detections and operational effectiveness.
• Want to influence the direction of a growing Cyber Operations capability.
• Thrive in fast-paced environments where no two days are quite the same.
• Enjoy solving difficult problems and seeing the impact of your work.
• Bring ideas to the table and enjoy helping shape better ways of working.

Responsibilities

• Monitoring, investigating and responding to cyber security alerts, events and incidents.
• Conducting proactive threat hunting activities to identify and contain potential threats before they impact the business.
• Maintaining and optimising cyber security technologies and tooling.
• Supporting the continuous improvement of security monitoring, detection and response capabilities.
• Working closely with our MSSP to review performance, detections and operational effectiveness through KPI/KRI reporting and ensuring effective triage and escalation of cyber threats.
• Investigating security events through to remediation within agreed SLAs.
• Helping develop operational processes, procedures, playbooks and detection use cases.
• Supporting incident response activities and remediation efforts to minimise business impact.
• Improving dashboards, alerting and reporting to drive operational efficiency and visibility.
• Providing oversight and support for cloud security controls and configurations.
• Supporting purple team exercises and validating the effectiveness of security controls.
• Working collaboratively with Cyber Threat Management and wider technology teams to strengthen our security posture.
• Supporting the delivery and execution of MAB's cyber security strategy and operational objectives.
• Acting as a deputy for the Security Manager, Cyber Operations when required including escalating and communicating key security issues to senior Information Security stakeholders.
• Participating in an on-call rota to provide support outside normal working hours when required. We're looking for a hands-on cyber security professional who enjoys both the operational and technical aspects of security. You'll be someone who is equally comfortable investigating a security alert, improving a detection rule, maintaining security tooling or contributing ideas that strengthen security operations.

Skills

SOC operations

Threat hunting

Incident response

Security tooling

SIEM platforms

Regulated environment

Analytical skills

Stakeholder management

Communication

Problem solving

Continuous improvement

Cloud security

On-call experience

Job description

One day you could be investigating security alerts and responding to incidents. The next, you'll be enhancing detections, improving security tooling, supporting threat hunting activities or helping to develop the playbooks and processes that drive our security operations. You'll join a highly collaborative team where your ideas and expertise will be valued. With exposure across Security Operations, Cyber Engineering and Threat Management, you'll have the opportunity to broaden your experience, influence how we operate and play a meaningful role in the continued development of our cyber capability. If you're someone who enjoys solving complex problems, thrives in a fast-paced environment and wants to make a visible impact, we'd love to hear from you.

What You'll Be Doing

• Monitoring, investigating and responding to cyber security alerts, events and incidents.
• Conducting proactive threat hunting activities to identify and contain potential threats before they impact the business.
• Maintaining and optimising cyber security technologies and tooling.
• Supporting the continuous improvement of security monitoring, detection and response capabilities.
• Working closely with our MSSP to review performance, detections and operational effectiveness through KPI/KRI reporting and ensuring effective triage and escalation of cyber threats.
• Investigating security events through to remediation within agreed SLAs.
• Helping develop operational processes, procedures, playbooks and detection use cases.
• Supporting incident response activities and remediation efforts to minimise business impact.
• Improving dashboards, alerting and reporting to drive operational efficiency and visibility.
• Providing oversight and support for cloud security controls and configurations.
• Supporting purple team exercises and validating the effectiveness of security controls.
• Working collaboratively with Cyber Threat Management and wider technology teams to strengthen our security posture.
• Supporting the delivery and execution of MAB's cyber security strategy and operational objectives.
• Acting as a deputy for the Security Manager, Cyber Operations when required including escalating and communicating key security issues to senior Information Security stakeholders.
• Participating in an on-call rota to provide support outside normal working hours when required. We're looking for a hands-on cyber security professional who enjoys both the operational and technical aspects of security. You'll be someone who is equally comfortable investigating a security alert, improving a detection rule, maintaining security tooling or contributing ideas that strengthen security operations.

You'll Bring

• Experience working within a SOC, Cyber Operations, Security Engineering or Incident Response environment.
• Strong experience monitoring and investigating cyber security events.
• Experience maintaining and administering security technologies, tooling and controls.
• Knowledge of threat hunting, protective monitoring, detection engineering and incident response.
• Experience working within a regulated environment, with Financial Services experience advantageous.
• A strong understanding of modern cyber threats and defensive security practices.
• Experience working with SIEM platforms and security monitoring tools.
• Strong analytical and problem-solving skills.
• Excellent stakeholder management and communication skills.
• Relevant cyber security certifications and qualifications.
• The ability to communicate technical concepts clearly to technical and non-technical audiences.
• A calm and methodical approach when managing incidents and working under pressure.
• A self-starting approach, with the ability to work independently as well as collaboratively within a highly technical cyber security team.
• A continuous improvement mindset and a passion for cyber security.
• Enjoy variety and exposure across multiple areas of cyber security.
• Like combining security operations with hands-on engineering activities.
• Enjoy identifying opportunities to improve processes, detections and operational effectiveness.
• Want to influence the direction of a growing Cyber Operations capability.
• Thrive in fast-paced environments where no two days are quite the same.
• Enjoy solving difficult problems and seeing the impact of your work.
• Bring ideas to the table and enjoy helping shape better ways of working.

Our Values

Success at MAB is not only about what we do, but how we do it. Take Ownership We take responsibility for outcomes, individually and collectively. We follow through, act proactively and hold ourselves to high standards. Customer First We put our customers at the centre of how we communicate, support and deliver our work. Stronger Together We achieve more when we collaborate, support one another and celebrate success collectively. Embrace Change We evolve, adapt and actively look for better ways to work. We see change as an opportunity to improve.

What's In It For You?

• Private Medical Insurance (Vitality)
• 25 days annual leave (increasing to 28 with service) plus your birthday off
• matched pension contribution (L&G)
• share save scheme (Equinity)
• retail discounts
• free entertainment tickets
• plus much more!
• Flexible working hours with hybrid working for Head Office roles (as agreed with your line manager)
• A wide range of Learning & Development offers, from 121 coaching to qualification support, helping you to grow and thrive in your career
• A supportive, inclusive culture with forums you're welcome to join from day 1, using your voice to make MAB an even better place to work