Responsibilities
- Lead the development and enhancement of technical security capabilities in areas including incident response, intrusion detection and prevention, cloud security across IaaS, PaaS, and SaaS, and identity and privileged access management.
- Serve as the top-level technical advisor within the security team, offering expert direction on security tools, controls, and implementation strategies.
- Act as the main point of contact for complex technical security issues, including incident analysis, phishing investigations, and guidance requests from staff and technical units such as DevOps.
- Manage the deployment, operation, and ongoing refinement of the security technology ecosystem, covering IAM and PAM systems, endpoint and extended detection and response (XDR), vulnerability scanners, SIEM and SOAR platforms, MFA solutions, and application security tools.
- Ensure security technologies function efficiently, are properly integrated, and deliver comprehensive coverage, threat detection, and response functionality.
- Improve detection rules, tool configurations, and incident response workflows to progressively strengthen the organization's security posture.
- Advance security initiatives by aligning technical execution with strategic objectives and driving continuous improvement projects.
- Support the growth of the security team by training and mentoring junior analysts and technical personnel in security best practices, tools, and procedures.
- Participate in an on-call rotation as coordinated with HR and provide timely support during security incidents according to established response protocols.
- Help maintain and refine the incident response call tree, escalation procedures, and operational response workflows.
Benefits
- Attractive equity package with strong potential for financial growth
- 25 days of paid vacation plus all standard public holidays
- Comprehensive private health insurance including dental and vision benefits
- Company-contributed pension plan via Smart Pensions
- Improved parental leave policy
- Government-backed cycle-to-work benefit program
- Electric vehicle salary sacrifice scheme
- Monthly complimentary access to Dermatica and MedExpress products plus family discounts
- Financial allowance for setting up a home office
- Access to mindfulness resources through Headspace, reduced-cost gym memberships, and professional development funding including free Kindle and Audible subscriptions
Compensation
Generous equity allocations with significant upside potential
Work Arrangement
Not specified
Team
Security team
Responsibilities
- Lead and mature the firm’s technical security capabilities across key domains, with a particular focus on: - Incident Management and Response - Intrusion Detection and Prevention (IDS/IPS) - Cloud Security (IaaS / PaaS / SaaS environments) - Identity and Access Management (IAM) and Privileged Access Management (PAM)
- Act as a senior technical authority within the security team, providing guidance and direction on security tooling, controls, and technical approaches.
- Serve as the primary senior escalation point for technical security queries, incident reports (including phishing analysis), and requests for guidance from general staff and technical teams (e.g. DevOps).
- Oversee the implementation, management, and continuous optimisation of the security technology stack, including but not limited to: - IAM / PAM solutions - Endpoint / Extended Detection and Response (XDR) - Vulnerability Management platforms - SIEM / SOAR platform - Multi-Factor Authentication (MFA) and authentication mechanisms - Application Security (AppSec) tooling
- Ensure security platforms are operating effectively, are well-integrated, and provide appropriate coverage, detection, and response capabilities.
- Drive improvements to tooling, detection logic, and response processes to continuously raise the organisation’s security maturity
- Drive the continuous improvement of security projects, translating strategic security goals into effective technical execution.
- Actively contribute to the development of the security function by training and mentoring junior analysts and other technical staff on security best practices, tools, and procedures.
- Participate in the on-call rota (as agreed with Recruitment/PeopleOps) and support incident response in line with the incident response process and call tree.
- Contribute to the ongoing development and maintenance of the Incident Response call tree, escalation paths, and operational response processes.
Benefits
- Generous equity allocations with significant upside potential
- 25 Days Holiday (+ all the usual Bank Holidays)
- Private health insurance, along with extra dental and eye care cover
- Employee Pension with Smart Pensions
- Enhanced parental leave
- Cycle-to-work Scheme
- Electric Car Scheme
- Free Dermatica and MedExpress products every month, as well as family discounts
- Home office allowance
- Access to a Headspace subscription, discounted gym memberships, and a learning and development budget (alongside a free Kindle and audible subscription)
Not specified
