Senior Security Operations Engineer

About Us

Risk Ledger is developing a network of connected organisations, all working together to defend against cybersecurity attacks in the supply chain. Organisations rely on us to establish trust, through sharing their security maturity and visualising the risks posed by their supply chain ecosystem. We are putting together an amazing and talented team from a diverse set of backgrounds and skillsets to drive us towards our vision. Risk Ledger is built on the respect we have for one another and our users, united by our shared values and mission. Every one of us is still learning: it’s how we grow as individuals. We’re curious. We’re ambitious. And we’re humble and honest. At Risk Ledger, we aim high to find the best solutions we can and always put our users first.

The team:

You’ll join the Head of Information Security supporting and collaborating with all parts of the business to deliver a secure environment enabling impactful outcomes for Risk Ledger and our customers.

This role:

As our Senior SecOps Engineer you’ll be playing a critical part in maintaining and improving the security of our product, business tools, people and organisation. This is an opportunity to have a huge long-standing impact through improving our technical security strategy, which will lead to even greater success for our business and our customers. From day one, you'll shape opportunities to empower our team by maintaining and improving the security of our tools and working practices for peak performance, all while safeguarding the confidentiality of our customers' data. Success hinges on collaboration, as you forge strong, trusted relationships across teams.

In this role you will:

• Drive technical security health and productivity by continuously seeking opportunities to improve our IT operations estate, evolving our ways of working with simplification and automation to remove friction for people to achieve pragmatic secure outcomes that balance risk.
• Support, coach and inform our people, ensuring individuals' needs are listened to and valued; informing them of security risks, controls and options in language that helps them understand; and putting them on a path to achieving their goals safely.
• Constructively contribute by asking the right questions at the right time, challenging assumptions, encouraging learning and driving positive impact through influence and respect.
• Manage a dynamic and diverse portfolio with flexible planning of in-flight work, technical developments and prioritisation of opportunities, alongside the Information Security Manager.
• Grow your own skills and knowledge by identifying opportunities to learn and apply the necessary skills to meet our business needs and your goals to develop your security expertise.
• Have an impact in our growing scale-up, contributing to product and service resilience.

You’ll have:

• An operational focus and prioritise security over compliance.
• Prior experience of deploying and maintaining Google Workspace, Jamf MDM, AWS and a variety of SaaS.
• Applied a broad knowledge of technical security operations and fundamental best practices to support others, and provide ways to help them achieve their goals.
• An innate sense of curiosity and flair for creativity, with a keen interest in getting the best security value from the tools available that support the operations of the wider business.
• Excellent communication skills, both written and verbal, with a strong collaborative mindset and a calm, controlled demeanour in the heat of an incident.
• Demonstrated experience in actively mentoring and guiding more junior colleagues, taking satisfaction in their professional growth.
• Extensive experience navigating and technically managing security and operational incidents.
• Proven ability to thrive and deliver in the high-paced, resource-conscious environment of a startup or scale-up.

What you might have:

• A strong understanding and ability to implement effective security controls throughout the entire Software Development Lifecycle (SDLC).
• Experience in the engineering, building, and maintenance of secure infrastructure and services within Google Cloud Platform (GCP).
• Experience in SIEM engineering, including the deployment, optimisation, and tuning of monitoring platforms.
• Experience leading and conducting product security threat modelling sessions across development teams.

Behavioural competencies: High EQ