At a Glance
- Tasks: Enhance security for our product and support teams in a dynamic environment.
- Company: Join Risk Ledger, a trusted partner for major organisations like ASOS and the NHS.
- Benefits: Competitive salary, equity package, private healthcare, and generous leave policies.
- Other info: Enjoy a hybrid working policy and regular socials to connect with your team.
- Why this job: Make a real impact in cybersecurity while growing your skills in a supportive team.
- Qualifications: Experience in security operations and strong communication skills are essential.
The predicted salary is between 75000 - 85000 £ per year.
Risk Ledger is developing a network of connected organisations, all working together to defend against cybersecurity attacks in the supply chain. Organizations rely on us to establish trust, through sharing their security maturity and visualising the risks posed by their supply chain ecosystem. We’re already trusted by customers like ASOS, Snyk, BAE Systems and the NHS. We are putting together an amazing and talented team from a diverse set of backgrounds and skillsets to drive us towards our vision. Risk Ledger is built on the respect we have for one another and our users, united by our shared values and mission. Every one of us is still learning; it’s how we grow as individuals. We’re curious, ambitious, humble and honest. At Risk Ledger, we aim high to find the best solutions we can and always put our users first.
You’ll join the Head of Information Security supporting and collaborating with all parts of the business to deliver a secure environment enabling impactful outcomes for Risk Ledger and our customers.
As our Senior SecOps Engineer you’ll play a critical part in maintaining and improving the security of our product, business tools, people, and organization.
Responsibilities
- Drive technical security health and productivity by continuously improving our IT operations estate, simplifying and automating processes to remove friction for people while balancing risk.
- Support, coach, and inform our people by listening to their needs, explaining security risks and controls in clear language, and helping them achieve safe goals.
- Constructively contribute by asking the right questions, challenging assumptions, encouraging learning, and influencing positive impact through respect.
- Manage a dynamic and diverse portfolio, planning work, technical developments, and prioritisation in partnership with the Information Security Manager.
- Grow your own skills and knowledge by identifying learning opportunities and applying necessary skills to meet business needs and develop security expertise.
- Have an impact across a growing scale‑up, from administering systems to delivering projects that enhance product and service resilience.
You’ll Have
- An operational focus prioritizing security over compliance.
- Prior experience deploying and maintaining Google Workspace, Jamf MDM, AWS, and various SaaS.
- Applied knowledge of technical security operations and fundamental best practices to support others.
- Innate curiosity and creativity with a keen interest in extracting the best security value from available tools.
- Excellent written and verbal communication skills, a collaborative mindset, and a calm demeanor during incidents.
- Demonstrated experience mentoring junior colleagues and supporting their professional growth.
- Extensive experience navigating and managing security and operational incidents.
- Proven ability to thrive and deliver in a high‑paced, resource‑conscious startup or scale‑up environment.
What You Might Have
- Strong understanding and ability to implement effective security controls throughout the entire Software Development Lifecycle (SDLC).
- Experience building, securing, and maintaining infrastructure and services within Google Cloud Platform (GCP).
- Experience in SIEM engineering, including deployment, optimization, and tuning of monitoring platforms.
- Experience leading and conducting product security threat‑modeling sessions across development teams.
Behavioural Competencies
- High EQ & resilient: optimistic, solution‑focused, diagnosing situations quickly and independently, delivering practical, high‑impact solutions, and remaining calm under pressure.
- Results, Quality, and Impact Focused: manage time effectively, meet deadlines, pick up errors promptly, resolve situations, and learn from them.
- Growth Mindset: continuous learning, embracing challenges, and expanding technical and professional capabilities.
- Problem Solving & Critical Thinking: identify potential issues, think rationally for improvements, remain objective and constructive under pressure.
Salary Range £75,000 - £85,000 GBP
The Perks
- Competitive base salary
- Generous EMI equity package
- Private pension
- 25 days annual leave + bank holidays
- Additional 30 days of unpaid leave per year to use as you wish
- Ad‑hoc company‑wide time off – last year we gave everyone 'rest leave' in August and over the festive period
- Private healthcare with AXA Insurance, including enhanced mental wellbeing coverage
- Hybrid working policy, typically 2‑3 days in the office
- Enhanced family (parental) leave – gender‑neutral policy, 12 weeks paid leave
- 5 days caretaker's leave
- Enhanced occupational sick pay
- £500 WFH budget
- All learning resources and books to aid personal development
- Regular socials to unwind and have fun
Seniority Level Mid‑Senior level
Employment Type Full‑time
Job Function Information Technology – Computer and Network Security
Senior Security Operations Engineer in London employer: Risk Ledger
At Risk Ledger, we pride ourselves on being an exceptional employer that fosters a collaborative and innovative work culture. Located in the vibrant UK tech scene, we offer our employees ample opportunities for professional growth, mentorship, and the chance to work on cutting-edge SaaS products that make a real impact. Join us to be part of a team that values creativity, supports your career development, and prioritises creating outstanding customer experiences.
StudySmarter Expert Advice🤫
We think this is how you could land Senior Security Operations Engineer in London
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including Risk Ledger, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through Risk Ledger
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at Risk Ledger. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace Senior Security Operations Engineer in London
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at Risk Ledger insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to Risk Ledger that you’re committed to staying ahead in the game.
How to prepare for a job interview at Risk Ledger
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at Risk Ledger to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at Risk Ledger.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.