Senior Security Operations & Incident Response Lead

Mastercard Inc.; Hayes End; On-site; GBP 65,000 - 90,000; Full time

Job summary

Mastercard Vocalink is seeking a Senior Security Monitoring and Response Analyst to join the UK team. The role focuses on triaging alerts, investigating escalated incidents, and driving improvements to detection and response capabilities within a critical payments infrastructure.

The ideal candidate will bring hands-on SOC experience, incident response and digital forensics skills, with strong collaboration across security engineering, threat intelligence and managed SOC partners.

Qualifications

• Direct experience in a Security Operations Center (SOC).
• Experience in incident response or digital forensics.
• Experience with cybersecurity disciplines including vulnerability research, network analysis, malware analysis, forensics, memory analysis, web security, threat hunting.

Responsibilities

• Provide monitoring coverage, triage and investigation of escalated alerts (T3).
• Respond to cybersecurity incidents using playbooks and critical thinking.
• Apply root cause analysis and lessons learned to improve security posture.
• Collaborate with security engineering, threat intel, insider threat, and managed SOC services.
• Develop knowledge base, playbooks and use cases with the team.
• Support proactive initiatives and projects with subject matter expertise.
• Work independently and with teams to assess impact, mitigate risk, and resolve incidents.

Skills

SOC experience

Incident response

Playbooks

SIEM SPL

Cloud security

EDR/NDR

IoCs/IoAs

ATT&CK

Threat hunting

Windows forensics

GCP/AWS/Azure

Communication

Tools

NDR/EDR tools

Job description

Mastercard Vocalink is seeking a Senior Security Monitoring and Response Analyst to join the UK team. The role focuses on triaging alerts, investigating escalated incidents, and driving improvements to detection and response capabilities within a critical payments infrastructure.

The ideal candidate will bring hands-on SOC experience, incident response and digital forensics skills, with strong collaboration across security engineering, threat intelligence and managed SOC partners.