Senior Security Operations Lead – SIEM & EDR (Hybrid)

Interactive Investor Plc; Manchester; Hybrid; GBP 49,000 - 59,000; Full time

Benefits offered by this job

Group Pension 8%

Life Assurance

Private Medical Insurance (Bupa)

25 Days Annual Leave

Staff Discounts

Personal & Well-being Fund

Retail Discounts

Voluntary Flexible Benefits

Job summary

interactive investor in Manchester/Leeds is seeking a Senior Security Operations Analyst to join the Information Security Team. The role focuses on monitoring, detecting, analysing and responding to security incidents in a hybrid setup (3 days on site, 2 days remote).

You will oversee Chronicle SIEM operations, create and tune rules, investigate alerts, monitor events for trends and threats, and drive remediation with the SOC and DevOps teams.

Qualifications

• Understanding security requirements and controls.
• Experience with SIEM and log data.
• Knowledge of firewalls and IDS/IPS.
• Strong communication skills; able to explain complex ideas simply.
• Ability to work independently and within a team.
• Understanding of cloud fundamentals.

Responsibilities

• Oversee Chronicle SIEM operations with Infrastructure/DevOps and SOC.
• Define and tune SIEM rules.
• Investigate alerts through to resolution.
• Provide dynamic monitoring and incident response capabilities.
• Monitor security events, identify trends, attacks, and threats.
• Identify problems and drive remediation.
• Assess threats from multiple sources and plan mitigations.
• Gather data, analyse and respond to incidents.
• Stay current on cyber trends and best practices.
• Assist in designing and documenting security policies and processes.
• Design test methods for security controls.
• Manage EDR daily.

Skills

SIEM tooling

Incident response

Threat analysis

Network security

Windows logs

Education

Degree in IT or Cyber

Tools

Splunk

Chronicle

Sentinel

Job description

interactive investor in Manchester/Leeds is seeking a Senior Security Operations Analyst to join the Information Security Team. The role focuses on monitoring, detecting, analysing and responding to security incidents in a hybrid setup (3 days on site, 2 days remote).

You will oversee Chronicle SIEM operations, create and tune rules, investigate alerts, monitor events for trends and threats, and drive remediation with the SOC and DevOps teams.