SecOps Engineer

ROLE: Senior Cyber Security Operations Engineer

LOCATION: London based, on-site 4 days p/w

SALARY: Up to £80,000 per annum + Bonus + Benefit

Lawrence Harvey are partnered with a leading Finance firm as they build out their Cyber Defence capability that are searching for a Senior Security Operations Engineer to play a pivotal role in shaping a modern, automation-first SecOps function from the ground up.

This is a hybrid engineering and operational role where you’ll contribute to both day-to-day security management and long-term strategic improvements. You’ll monitor, detect and respond to incidents, while engineering new detection rules, improving tooling, and driving automation across the stack. This is an opportunity to have real impact, working in a greenfield SOC environment where cloud-native security has been considered from inception.

Why should you apply?

This is a rare opportunity to join an innovative, high-growth FinTech business at a transformative moment. The firm has a modern, forward-thinking approach to cyber security — and you’ll have the autonomy and support to leave a lasting impact.

What You’ll Be Doing:

• Operate at the heart of our Security Operations team, owning key technologies and collaborating with our Managed Security Service Provider.
• Support the engineering and tuning of security products, including EDR, SIEM, vulnerability scanners, SOAR, and sandboxing platforms.
• Lead incident investigations and serve as a technical SME during major incidents and training exercises.
• Develop and deploy Detection-as-Code (DaC) and Infrastructure-as-Code (IaC) to enhance automation and reduce manual overhead.
• Collaborate across teams — including Infrastructure and Cloud — to ensure consistent security coverage and remediation of vulnerabilities.
• Contribute to red and purple team exercises, threat modelling, and continuous improvement of our cyber detection and response processes.
• Take an active role in mentoring junior team members and shaping the future of the SOC.

Requirements:

• 3+ years in a SOC or Security Engineering role, with experience handling major incidents and complex investigations.
• Demonstrated experience working with Microsoft security tools (Defender, Sentinel, Purview, Entra ID).
• Experience working in cloud-native environments (Azure and/or AWS).
• Strong hands-on knowledge of SIEM, EDR, vulnerability scanners, and Next Gen Firewalls.
• Proven ability to implement and deploy Detection-as-Code and Infrastructure-as-Code.
• Excellent communication and documentation skills; able to influence both technical and non-technical stakeholders.

Desirable:

• Red, Blue, or Purple Team experience.
• Linux and macOS security exposure.
• Exposure to scripting (e.g., Python, PowerShell) and data visualization (e.g., Power BI, Pandas).
• Background in infrastructure or identity support (Active Directory environments).

If you're passionate about proactive security engineering and want to build alongside some of the sharpest cyber minds in the business, make your applications and let's connect!