Senior SecOps Engineer

JR United Kingdom; Preston; Remote; GBP 80,000 - 90,000; Full time

Job summary

A leading FinTech firm is looking for a Senior SecOps Engineer to enhance their Cyber Defence capability. The role involves engineering and analysis in a greenfield SOC environment with responsibilities including incident response, rule development, and mentoring juniors. Candidates must have over 4 years of SOC experience, especially in cloud and automation. Attractive salary package offered, work is fully remote.

Benefits

Bonus

Benefits

Qualifications

• 4+ years of experience working in a SOC environment.
• Experience dealing with high-profile incidents.
• Practical experience in implementing DAC and IAC.

Responsibilities

• Lead and handle complex incident investigations.
• Develop and automate new detection rules.
• Mentor junior team members during investigations.

Skills

SOC experience

Cloud environments (Azure/AWS)

Detection-as-Code (DAC)

Infrastructure-as-Code (IAC)

Microsoft Security stack

Job description

Social network you want to login/join with:

Senior SecOps Engineer, preston, lancashire

col-narrow-left

Client:

Lawrence Harvey

Location:

preston, lancashire, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

3

Posted:

22.08.2025

Expiry Date:

06.10.2025

col-wide

Job Description:

Location – Fully Remote

Salary - £80-90k + Bonus + Benefits

Currently working with a UK Fintech firm who are in the process of building out their Cyber Defence capability and looking to bring in a Senior SecOps Engineer with experience working in cloud-native environment and automation-first mindset.

This is a wide ranging role where you’ll be responsible for both Engineering and Analysis; monitoring and responding to incidents whilst also developing new detection rules and enhancing their monitoring infrastructure and tooling. This is a relatively greenfield SecOps environment where security and detections have been built in from inception at the development stage – that mindset and experience implementing and deploying Detection-as-Code (DAC) and Infrastructure-as-Code (IAC) will be essential.

This is an incredible opportunity for an experienced SecOps specialist with experience of both SecOps Analysis and Engineering to join a growing yet established firm at a crucial point as they completely build out their Information and Cyber Security capability. Whilst they have the fundamentals in place, this is a relatively greenfield SOC buildout, where you will work alongside the SOC Manager to shape their SOC monitoring, detection and response function.

Key Responsibilities:

• Act as a lead and technical escalation point on the most complex incidents and investigations.
• Develop and engineer new detection rules, automating monotonous tasks where possible and looking for opportunities to implement and deploy Detection-as-Code (DAC) and Infrastructure-as-Code (IAC) wherever possible.
• Proactively research emerging and potential threat actors as a way of developing rules to safeguard against potential future threats.
• Mentor and train junior team members through complex incident response investigations.

Key Requirements:

• Significant experience working in a SOC environment (4 years minimum), dealing with and responding to escalated and most high profile incidents.
• Experience working in hybrid-cloud SOC environments – Azure/AWS preferably.
• Practical experience both implementing and deploying DAC and IAC.
• Comprehensive knowledge and experience utilising/fine-tuning the Microsoft Security stack – Defender, Sentinel, KQL, etc.
• Ability to articulate specific projects that you have built, developed or led on, specific to SecOps Engineering and Automation.

If you’re an experienced SecOps Engineer, looking to shape how one of the most innovative Mobile Payments FinTech firms build out their cyber defence capability and leave a lasting impact on one of the most reputable organisations whilst working alongside a team of genuine Cyber Security SMEs, click the to apply or get in touch directly – [emailprotected]