Senior Security Engineer(Hybrid) in London

You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we're behind many of the digital experiences you use every day. Whether you want to book a holiday, order food, renew a subscription, or check out online, there's a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale. The roleYou will be a hands-on operator at the heart of the Cyber Security team, helping to run, harden, and continuously improve the day-to-day machinery of security. Where the Detection & Threat Engineer defines what "good" looks like, you help make it real, turning standards, runbooks, and tooling into reliable, repeatable operational practice. You will partner closely with Senior Detection & Threat Engineers, Application Security, Information Security, Security Operations, and Engineering executing against the standards they set, feeding operational insight back up, and progressively taking ownership of the tooling and procedures that keep security operations running. What you'll be responsible forSupporting and enhancing security tooling SIEM, EDR, DLP, vulnerability management, and automation platforms including configuration, tuning, and day-to-day maintenanceBuilding and improving operational procedures, runbooks, and playbooks so the team's response is consistent and repeatableTriaging and handling security alerts, escalating high-severity events, and contributing to incident response under the direction of senior engineersTracking, coordinating, and driving pentest and vulnerability findings through to remediation across engineering teams (ownership, action plans, status, closure)Maintaining the accuracy and hygiene of security data asset inventories, finding trackers, and remediation recordsSupporting detection deployment and validation, and feeding operational feedback into detection tuning to reduce noise and alert fatigueAssisting with scripting and automation to remove manual toil from recurring operational tasksProducing clear operational reporting and metrics on findings, remediation progress, and tooling healthWhat we're looking for5+ years of hands-on experience in a Security Operations, SOC, or equivalent operational security rolePractical experience operating modern security tooling SIEM (e.g. Sentinel), Data Loss Prevention (DLP) tools, EDR, and vulnerability management platformsSolid understanding of security operations workflows: alert triage, incident handling, and vulnerability/finding remediation lifecyclesComfort with scripting to support automation and tooling (e.g. Python, KQL)Experience coordinating remediation across multiple engineering or platform teams, and keeping work moving to closureWorking knowledge of cloud environments (e.g. AWS, Azure and GCP) and how security operations apply across cloud and SaaSFamiliarity with common frameworks and standards such as PCI DSS, NIST CSF, SOC 2, ISO 27001, CIS Benchmarks, and MITRE ATT&CKA pragmatic, ownership-minded operator: methodical, detail-oriented, and focused on getting things fixed rather than just loggedAdditional InformationBring all of you to workWe create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection.