Security Engineer III - Security Operations

Responsibilities

• Plan and deliver detection and response work end-to-end — from a new detection rule to a fully automated response — within your area of ownership.
• Build, tune and maintain detections across our SIEM (Elastic) and AWS environment, closing gaps that existing coverage misses.
• Own an investigation queue: triage, investigate, escalate and resolve security incidents, and write up findings clearly enough to stand on their own.
• Build runbooks and automations (Python, and no-code tools like Zapier or Tines) to cut manual work out of triage and response.
• Make and document risk decisions in your area, and know when to pull in others.
• Support our compliance programme by keeping the controls you own audit-ready and contributing evidence for audits (e.g. SOC 2, PCI DSS).
• Use Terraform and Python to build and maintain the infrastructure behind your detections and tooling.
• Join our on-call rotation for incident response and monitoring.

Languages