Senior Security Engineer — Incident Response & Automation

Zepz; Greater London; Hybrid; GBP 70,000 - 95,000; Full time

Benefits offered by this job

Office in London

Job summary

Zepz is expanding its security function in London to scale incident response and vulnerability management. You will join a close-knit team focused on phishing campaigns, SIEM operations, and purple team activities with a strong automation orientation.

The role emphasizes rapid incidents handling, collaboration with engineering and business teams, and continuous improvement within a high-trust culture.

Qualifications

• Experience in incident response and vulnerability management.
• Experience with public cloud server infrastructure and containerized environments.
• Scripting and automation experience.
• Familiarity with SIEM and EDR tools.
• Familiarity with Infrastructure as Code tools (Terraform, CloudFormation).
• Knowledge of cyber security frameworks such as NIST.

Responsibilities

• Respond to security incidents in a timely and effective manner.
• Investigate incidents to identify root causes and prevent recurrence.
• Communicate with stakeholders throughout incident response.
• Create run books for common scenarios and automation readiness.
• Review tooling and automate where possible leveraging SIEM integrations.
• Manage threat and vulnerability management and remediation metrics.
• Improve stakeholder collaboration and influence security outcomes.
• Partner with engineering, operations, and business teams to foster a security-first culture.
• Lead security education and awareness campaigns across disciplines.
• Stay updated with latest security operations developments.

Skills

Security fundamentals

Incident response

Scripting

SIEM

EDR

IaC tools

NIST

Container security

Tools

Terraform

CloudFormation

Job description

Zepz is expanding its security function in London to scale incident response and vulnerability management. You will join a close-knit team focused on phishing campaigns, SIEM operations, and purple team activities with a strong automation orientation.

The role emphasizes rapid incidents handling, collaboration with engineering and business teams, and continuous improvement within a high-trust culture.