Senior Security Operations & Incident Response Analyst

Mastercard Inc.; Greater London; On-site; GBP 70,000 - 100,000; Full time

Job summary

Mastercard Vocalink in London is seeking a driven Senior Security Operations Analyst with incident response capabilities to help secure critical payments infrastructure in the UK. You will monitor, triage and respond to alerts, and lead incident containment and remediation with playbooks and cross‑functional collaboration.

The role requires hands-on experience in SOC operations, incident response, forensics, and cloud security across Azure, AWS or GCP.

Qualifications

• Experience in an SOC and incident response role.
• Proficiency with SIEM queries (Splunk SPL).
• Windows/Unix forensics experience.
• Cloud security knowledge (Azure, AWS, GCP) and EDR/NDR tools.

Responsibilities

• Triage alerts and respond to security incidents.
• Provide monitoring coverage and investigate escalated alerts (T3).
• Respond to incidents via defined playbooks and playbook updates.
• Perform root-cause analysis and apply lessons learned.
• Collaborate with security engineering, threat intel, insider threat and managed SOC.
• Develop knowledge base, playbooks and use cases.
• Support proactive initiatives and project work.
• Work independently and with teams to assess impact and mitigate risk.

Skills

SOC experience

Incident response

Threat hunting

Analytical thinking

Education

CISSP/GIAC certification

Tools

SIEM (Splunk)

EDR/NDR tools

Cloud security tools

Job description

Mastercard Vocalink in London is seeking a driven Senior Security Operations Analyst with incident response capabilities to help secure critical payments infrastructure in the UK. You will monitor, triage and respond to alerts, and lead incident containment and remediation with playbooks and cross‑functional collaboration.

The role requires hands-on experience in SOC operations, incident response, forensics, and cloud security across Azure, AWS or GCP.