Senior SecOps Engineer

JR United Kingdom; Watford; Remote; GBP 80,000 - 90,000; Full time

Job summary

A leading FinTech firm in the UK seeks a Senior SecOps Engineer to build their Cyber Defence capability. This remote role involves engineering and analysis, developing detection rules, and shaping a greenfield SOC environment. The ideal candidate has over 4 years in a SOC, cloud-native experience, and a proactive mindset for tackling security challenges.

Benefits

Bonus

Benefits package

Qualifications

• 4+ years of experience in a SOC environment dealing with escalated incidents.
• Experience in hybrid-cloud SOC environments like Azure/AWS.
• Practical experience implementing and deploying DAC and IAC.

Responsibilities

• Act as lead on complex incidents and investigations.
• Develop new detection rules and automate tasks.
• Mentor junior team members in incident response.

Skills

Cloud-native environments

Detection-as-Code

Incident response

Automation

Microsoft Security stack

Job description

Social network you want to login/join with:

Senior SecOps Engineer, watford, hertfordshire

col-narrow-left

Client:

Lawrence Harvey

Location:

watford, hertfordshire, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

3

Posted:

22.08.2025

Expiry Date:

06.10.2025

col-wide

Job Description:

Location – Fully Remote

Salary - £80-90k + Bonus + Benefits

Currently working with a UK Fintech firm who are in the process of building out their Cyber Defence capability and looking to bring in a Senior SecOps Engineer with experience working in cloud-native environment and automation-first mindset.

This is a wide ranging role where you’ll be responsible for both Engineering and Analysis; monitoring and responding to incidents whilst also developing new detection rules and enhancing their monitoring infrastructure and tooling. This is a relatively greenfield SecOps environment where security and detections have been built in from inception at the development stage – that mindset and experience implementing and deploying Detection-as-Code (DAC) and Infrastructure-as-Code (IAC) will be essential.

This is an incredible opportunity for an experienced SecOps specialist with experience of both SecOps Analysis and Engineering to join a growing yet established firm at a crucial point as they completely build out their Information and Cyber Security capability. Whilst they have the fundamentals in place, this is a relatively greenfield SOC buildout, where you will work alongside the SOC Manager to shape their SOC monitoring, detection and response function.

Key Responsibilities:

• Act as a lead and technical escalation point on the most complex incidents and investigations.
• Develop and engineer new detection rules, automating monotonous tasks where possible and looking for opportunities to implement and deploy Detection-as-Code (DAC) and Infrastructure-as-Code (IAC) wherever possible.
• Proactively research emerging and potential threat actors as a way of developing rules to safeguard against potential future threats.
• Mentor and train junior team members through complex incident response investigations.

Key Requirements:

• Significant experience working in a SOC environment (4 years minimum), dealing with and responding to escalated and most high profile incidents.
• Experience working in hybrid-cloud SOC environments – Azure/AWS preferably.
• Practical experience both implementing and deploying DAC and IAC.
• Comprehensive knowledge and experience utilising/fine-tuning the Microsoft Security stack – Defender, Sentinel, KQL, etc.
• Ability to articulate specific projects that you have built, developed or led on, specific to SecOps Engineering and Automation.

If you’re an experienced SecOps Engineer, looking to shape how one of the most innovative Mobile Payments FinTech firms build out their cyber defence capability and leave a lasting impact on one of the most reputable organisations whilst working alongside a team of genuine Cyber Security SMEs, click the to apply or get in touch directly – [emailprotected]