Senior Security Operations Engineer at Indeed Flex, UK, 12 Months, £450 per day (Outside IR35)

The current staffing model is broken, with low wages and limited opportunities. As flexible work continues to grow, we’re taking a radically different approach: providing job seekers with control, ownership and choice, so employees can find the working patterns and scenarios to suit their lifestyles. In doing so, we aim to revolutionise the industry.

After demonstrating our approach throughout the UK under the Syft brand, we were acquired by Indeed.com in 2019 and we rebranded to Indeed Flex in 2020. With continued independence and phenomenal levels of support we’ve been able to accelerate our mission as we expand throughout the US as well as the UK. Fast growth creates tremendous opportunities - come and join a team of inquisitive, passionate, and driven individuals helping each other grow and building something meaningful!

Main Purpose

We are looking for a Security Operations Senior with a considerable amount of experience working in a Cloud/ DevSecOps centric environment.. You will play a crucial role in developing and operating our Cyber defence capabilities, actively monitoring for malicious activity and ensuring security  incident response preparedness. Working closely with the Security Engineering team and other key stakeholders you will be instrumental in shaping plans for continuously developing the maturity and effectiveness of operational security capabilities and practices.  

Responsibilities & Duties

• Act as a lead and escalation point for security incidents and investigations
• Lead, the delivery of ‘operational and technical’ lessons learnt post incident analysis and reporting
• Undertake analysis and triaging of security alerts to identify potential malicious activities
• Working within the Security Engineering team develop and enhance security operational maturity through implementation of SIEM capabilities, optimal use case definition and automated threat detection
• Advise and work with cross functional engineering teams to prioritise, remediate/mitigate identified vulnerabilities and risks
• Develop and deliver training plans to support security operations management
• Maintain and proactively communicate awareness of security advisories to key stakeholders and reporting on operational security status
• Continuously improve maturity capability through regular exercises, simulations and other activities.
• Develop and conduct Threat Hunting exercises and undertake threat and vulnerability assessments identifying potential vulnerabilities
• Develop and maintain effective security controls in compliance with Indeed CIS Control Framework. 

Qualifications & Skills

• Prior experience working in an Incident Response / SOC / Threat and Vulnerability Management (ideally in a lead capacity)
• Demonstrable experience in developing Incident Response plans, processes and procedures
• Ability to quickly assess and exercise situation awareness to prioritise and coordinate incident response activities
• Strong communicator able to interpret technical information and communicate to non-technical audience
• Familiarity with security frameworks such as MITRE, cyber kill chain and APT campaign strategies
• Engineering experience of operating and managing security in a Cloud environment - highly desirable AWS, Kubernetes, Cloudflare, Terraform, Python
• Demonstrable practical experience in applying Cyber security controls and capabilities to detect, protect and mitigate threats.
• Knowledge of the Centre For Internet Security (CIS) Critical Security Controls framework   

• £450 per day (Outside IR35)/ 12 months

You’ll fit right in at Indeed Flex if:

• You’re a great communicator and highly collaborative. We’re best when we all pull in the same direction
• You don’t mind doing the work, whatever it is - you can see the impact at the end and you’re in it for the long haul
• Data is your heart and soul - you know you need it to drive you in the right direction
• You’re proactive and always willing to learn
• You can navigate the ambiguity and high levels of autonomy in a scale up environment - you know what we’re about and you want to be a part of it