Senior Security Operations Analyst

This is a fully remote position, open to applicants in United Kingdom, +2 more countries.

📋 Description

• Act as the central operational security point for EMEA, facilitating seamless follow-the-sun operations across APAC and the Americas.

• Evaluate security incidents and probe potential threats.

• Authenticate, manage, contain, and eliminate medium-to-high severity incidents affecting endpoint, identity, SaaS, and cloud environments.

• Oversee and address security incidents in on-premises, identity, and cloud-based settings.

• Conduct in-depth investigations, threat isolation, and query hunting utilizing CrowdStrike Falcon.

• Examine identity breaches, phishing attacks, and suspicious account behavior through Google Admin Console.

• Assess ingress edge telemetry, CDN traffic, WAF occurrences, and web server logs to identify and counteract web assaults, DDoS situations, and botnet or scraping exploitation.

• Keep incident response plans and runbooks up to date.

• Partner with engineering to automate containment processes.

• Coordinate remediation efforts across departments and escalate unresolved incidents with technical root-cause analysis in accordance with MITRE ATT&CK.

• Collaborate with content production on security awareness initiatives and mentorship.

⛳️ Requirements

• Over 5 years of hands-on experience in Security Operations (SOC), Incident Response, or comparable technical operational roles.

• A Bachelor’s degree in Computer Science, Engineering, or Information Security, or equivalent practical experience.

• Extensive operational experience with CrowdStrike, including Host Timeline, Real Time Response, and query hunting capabilities.

• Demonstrated experience with Google Admin Console for phishing, BEC, and identity investigations.

• Practical experience with EDR, SWG, SIEM, and MDM security solutions.

• Strong grasp of network protocols, traffic flow, and the OSI model.

• Background in log analysis, malware triage, and digital forensics.

• Capability to operate independently during incidents with minimal oversight.

• Hands-on experience with AI tools, LLMs, or agentic workflows for analysis, scripting, or automation.

• Familiarity with ITIL and functional knowledge of the MITRE ATT&CK framework.

• Skill in presenting findings confidently and courteously to both technical and non-technical audiences.

• Self-motivated, innovative, and capable of critical thinking.

• Strong self-organization and stress management skills during high-pressure situations.

• Certifications such as CISSP, Security+, or CEH are advantageous but secondary to proven real-world execution.

• Experience with Cloudflare edge/WAF logs and Acquia/Drupal web server access logs is desirable.

• Cloud security experience with GCP, AWS, or Azure is a plus.

• Proficiency in scripting with Python, PowerShell, or Bash is an advantage.

• Exposure to Blue, Red, or Purple team simulation exercises is a bonus.

🏝️ Benefits

• An equal-opportunity employer dedicated to fostering a respectful and empowering workplace.

• A diverse and inclusive workplace culture.

• Opportunities to learn, experiment with new tools, and propose process improvements.