Senior Security Operations Engineer (Cybersecurity)

TL;DR

Senior Security Operations Engineer (Cybersecurity): Building and maturing security operations and engineering capabilities for a cybersecurity SaaS platform with an accent on detection and response, cloud security, vulnerability management, and security telemetry. Focus on designing scalable security services, automating operational workflows, embedding secure-by-design principles, and governing AI security risks.

Location: London, UK, with a hybrid policy requiring typically 2–3 days in the office

Salary: £90,000–£100,000 GBP

Company

hirify.global develops a cybersecurity platform that helps organisations establish trust and manage risks across their supply chain ecosystems.

What you will do

• Own and improve security monitoring, detection, incident response, vulnerability management, and operational security across cloud, endpoint, and SaaS environments.
• Build and tune detections, reduce alert fatigue, and translate attacker techniques into actionable security intelligence.
• Improve AWS and GCP security posture through identity management, telemetry, network security, encryption, and continuous assessment.
• Automate security processes, playbooks, and workflows while supporting audits and compliance controls.
• Design scalable security services and evolve the security telemetry and detection platform.
• Provide technical leadership, mentor colleagues, support incident escalations, and shape the long-term security roadmap.

Requirements

• 5+ years of experience in security operations, security engineering, or incident response.
• Hands-on experience securing AWS and/or GCP cloud environments.
• Deep experience with SIEM, EDR, detection engineering, alert triage, and incident response.
• Experience with security tooling such as DLP, MDM, and cloud security platforms.
• Security automation skills using Python, Go, TypeScript/JavaScript, Bash, or similar technologies.
• Understanding of MITRE ATT&CK, vulnerability management, networking, distributed systems, cloud architectures, and AI security risks.

Nice to have

• Cloud-native security architecture or detection engineering programme experience.
• Threat hunting, purple team, CNAPP, CSPM, or exposure management experience.
• Experience with eBPF, modern observability, SOAR, policy-as-code, or security governance.
• Knowledge of supply chain security, software integrity, AI/LLM security, agentic systems, or model governance.

Culture & Benefits

• Hybrid working with typically 2–3 office days per week.
• Competitive base salary, EMI equity package, private pension, and private AXA healthcare.
• 28 days of annual leave plus bank holidays and 30 additional days of unpaid leave.
• Enhanced parental, caretaker’s, and occupational sick leave policies.
• £500 work-from-home budget, learning resources, books, and regular company socials.