Security Specialist - Cyber Operations

Permanent, Full-time (37.5 hours per week, Monday to Friday)

Hybrid working, 1 day a week in the office (Derby)

Want to help shape the future of Cyber Operations?

At MAB, cyber security plays a critical role in protecting our business, customers and colleagues. As we continue to evolve our capabilities and strengthen our cyber resilience, we're looking for a Security Specialist to join our Cyber Operations team.

This isn't a role where you'll be confined to a single specialism. One day you could be investigating security alerts and responding to incidents. The next, you'll be enhancing detections, improving security tooling, supporting threat hunting activities or helping to develop the playbooks and processes that drive our security operations.

You'll join a highly collaborative team where your ideas and expertise will be valued. With exposure across Security Operations, Cyber Engineering and Threat Management, you'll have the opportunity to broaden your experience, influence how we operate and play a meaningful role in the continued development of our cyber capability.

If you're someone who enjoys solving complex problems, thrives in a fast-paced environment and wants to make a visible impact, we'd love to hear from you.

The Role

As a Security Specialist within our Cyber Operations team, you'll help defend MAB against emerging cyber threats through monitoring, investigation, engineering and response activities.

This is a varied role that combines elements of Security Operations, Cyber Engineering and Threat Detection, making it ideal for someone who enjoys working across multiple cyber disciplines rather than specialising in just one area.

Working closely with the Security Manager, Cyber Operations, you'll support the day-to-day operation of our cyber security controls, investigate security events, maintain and enhance security technologies, and contribute to the continual improvement of our detection and response capabilities.

You'll also work alongside our Managed Security Services Provider (MSSP), helping ensure threats are identified, escalated and remediated effectively while driving improvements across our cyber operations function.

What You'll Be Doing

• Monitoring, investigating and responding to cyber security alerts, events and incidents.
• Conducting proactive threat hunting activities to identify and contain potential threats before they impact the business.
• Maintaining and optimising cyber security technologies and tooling.
• Supporting the continuous improvement of security monitoring, detection and response capabilities.
• Working closely with our MSSP to review performance, detections and operational effectiveness through KPI/KRI reporting and ensuring effective triage and escalation of cyber threats.
• Investigating security events through to remediation within agreed SLAs.
• Helping develop operational processes, procedures, playbooks and detection use cases.
• Supporting incident response activities and remediation efforts to minimise business impact.
• Improving dashboards, alerting and reporting to drive operational efficiency and visibility.
• Providing oversight and support for cloud security controls and configurations.
• Supporting purple team exercises and validating the effectiveness of security controls.
• Working collaboratively with Cyber Threat Management and wider technology teams to strengthen our security posture.
• Supporting the delivery and execution of MAB's cyber security strategy and operational objectives.
• Acting as a deputy for the Security Manager, Cyber Operations when required including escalating and communicating key security issues to senior Information Security stakeholders.
• Participating in an on-call rota to provide support outside normal working hours when required.

What We're Looking For

We're looking for a hands-on cyber security professional who enjoys both the operational and technical aspects of security. You'll be someone who is equally comfortable investigating a security alert, improving a detection rule, maintaining security tooling or contributing ideas that strengthen security operations.

You’ll Bring

• Experience working within a SOC, Cyber Operations, Security Engineering or Incident Response environment.
• Strong experience monitoring and investigating cyber security events.
• Experience maintaining and administering security technologies, tooling and controls.
• Knowledge of threat hunting, protective monitoring, detection engineering and incident response.
• Experience working within a regulated environment, with Financial Services experience advantageous.
• A strong understanding of modern cyber threats and defensive security practices.
• Experience working with SIEM platforms and security monitoring tools.
• Strong analytical and problem-solving skills.
• Excellent stakeholder management and communication skills.
• Relevant cyber security certifications and qualifications.
• The ability to communicate technical concepts clearly to technical and non-technical audiences.
• A calm and methodical approach when managing incidents and working under pressure.
• A self-starting approach, with the ability to work independently as well as collaboratively within a highly technical cyber security team.
• A continuous improvement mindset and a passion for cyber security.

You’ll Thrive Here If You...

• Enjoy variety and exposure across multiple areas of cyber security.
• Like combining security operations with hands-on engineering activities.
• Enjoy identifying opportunities to improve processes, detections and operational effectiveness.
• Want to influence the direction of a growing Cyber Operations capability.
• Thrive in fast-paced environments where no two days are quite the same.
• Enjoy solving difficult problems and seeing the impact of your work.
• Bring ideas to the table and enjoy helping shape better ways of working.

Recruitment Process

Stage 1: Teams interview

What's In It For You?

Private Medical Insurance (Vitality), 25 days annual leave (increasing to 28 with service) plus your birthday off, matched pension contribution (L&G), share save scheme (Equinity), retail discounts, free entertainment tickets, plus much more!

Flexible working hours with hybrid working for Head Office roles (as agreed with your line manager)

A wide range of Learning & Development offers, from 121 coaching to qualification support, helping you to grow and thrive in your career

A supportive, inclusive culture with forums you're welcome to join from day 1, using your voice to make MAB an even better place to work

Everyone is Welcome

At MAB, we value different experiences and perspectives which adds diversity and value to our culture. As an equal opportunities employer, we are committed to creating an environment where everyone feels welcomed, included and heard for who they are. We aspire to have a diverse and inclusive workplace and strongly encourage applicants from a wide range of backgrounds to apply and join us.

We are committed to reducing barriers in every stage of our recruitment process so everyone feels they can bring their best self when applying for new opportunities at MAB. If you'd like to hear how we can support you by adjusting our process, from application to interview and onboarding, please contact careers@mab.org.uk.

Use of AI

We recognise that AI tools can be a helpful way to articulate your qualities, skills and experience when applying for roles. It's important to us, however, that we see the real you throughout the recruitment process. We hire real people, not polished personas! We simply ask that you consider carefully how and where you use AI during your application, so we can hear your own thoughts and meet your authentic self.

Please note we are unable to consider candidates requiring visa sponsorship at this moment in time. We won't be accepting speculative CVs from recruitment agencies, with a full PSL in place.

#J-18808-Ljbffr