Senior Security Engineer: Incident Response & Automation

Zepz; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Unlimited annual leave

Healthcare benefits

Employee discounts

Office presence in London

Job summary

Zepz is scaling its security operations to protect its cross-border payments platforms. The role focuses on incident response, vulnerability management, and automation to accelerate detection, containment and remediation across cloud and containerised environments.

You will collaborate with engineering, operations and product teams to embed a security-first culture and continuously improve runbooks, tooling and incident reporting. London-based hybrid work is supported.

Qualifications

• Minimum 3+ years in security operations or incident response.
• Experience with public cloud, containerised environments, and EuC.
• Proficient scripting and automation capabilities.
• Hands-on with SIEM and EDR tools.
• Familiarity with Terraform or CloudFormation.
• Knowledge of security frameworks such as NIST.

Responsibilities

• Respond to security incidents in a timely and effective manner.
• Investigate incidents to identify root causes and prevent recurrence.
• Communicate with stakeholders throughout the response process.
• Create run books for common scenarios to improve automation.
• Review tooling and automate using SIEM integrations and APIs.
• Manage threat and vulnerability management.
• Keep abreast of emerging threats and vulnerabilities.
• Own vulnerability reporting services and remediation metrics.
• Improve stakeholder collaboration and influence.
• Partner with engineering, operations, and business teams on security culture.
• Lead security education and awareness campaigns.
• Strive for continuous improvement.
• Stay updated with security ops developments.

Skills

Security fundamentals

Incident response

Scripting & automation

SIEM & EDR

IaC tooling

Security frameworks

Job description

Zepz is scaling its security operations to protect its cross-border payments platforms. The role focuses on incident response, vulnerability management, and automation to accelerate detection, containment and remediation across cloud and containerised environments.

You will collaborate with engineering, operations and product teams to embed a security-first culture and continuously improve runbooks, tooling and incident reporting. London-based hybrid work is supported.