Security Operations Engineer

Join us at EIT:

At the Ellison Institute of Technology (EIT), we're on a mission to translate scientific discovery into real world impact. We bring together visionary scientists, technologists, engineers, researchers, educators and innovators to tackle humanity's greatest challenges in four transformative areas:

• 
  Health, Medical Science & Generative Biolog
• yFood Security & Sustainable Agricultur
• eClimate Change & Managing CO
• ₂Artificial Intelligence & Robotic

s
This is ambitious work - work that demands curiosity, courage, and a relentless drive to make a difference. At EIT, you'll join a community built on excellence, innovation, tenacity, trust, and collaboration, where bold ideas become real-world breakthroughs. Together, we push boundaries, embrace complexity, and create solutions to scale ideas from lab to society. Explore more at www.eit.or

g.

Your Ro

le: At EIT we are seeking experienced and proactive Security Operations Engineers to help protect our people, platforms, and world‑class research. This is a hands‑on, impactful role at the centre of our cyber‑security function, combining monitoring, incident response, detection engineering, and continuous improvement of our security post

ure.
You will work closely with IT, research computing, governance, and legal teams to ensure that security enables, not hinders scientific innovation. If you want to be part of a mission‑driven environment and play a critical role in safeguarding breakthrough research, we'd love to hear from

you.

Your Responsibi

lities:
In this role, y

• ou will:Operate and continuously enhance security monitoring across endpoints, servers, cloud platforms, and
• networksTune and maintain SIEM tools (including Sophos Taegis, SentinelOne EDR, and OCI security tooling) to improve detection
• accuracyInvestigate and triage security alerts, escalating and responding appro
• priatelyAct as a responder for security incidents, supporting containment, eradication, and
• recoveryProduce clear incident documentation, including reports and root‑cause
• analysisDevelop and refine detection rules, automation workflows, and threat‑based u
• se casesApply threat intelligence to improve detection coverage in complex research envi
• ronmentsSupport vulnerability scanning, prioritisation, and remediation

essments
Req

uirements
Essential Skills, Qualifications & E

• xperience:Experience working in Security Operations, a SOC, or in Inciden
• t ResponseHands‑on experience with SIEM platforms such as Azure Sentinel, Splunk, or Sop
• hos TaegisFamiliarity with EDR tools including SentinelOne or C
• rowdStrikeA strong understanding of common attack techniques (MITRE A
• TT&CK)Working knowledge of Windows, Linux, identity systems, and
• networkingExperience working with cloud platforms (OCI preferred) in a securi

ty context
Desirable Skills, Qualifications &

• Experience:Scripting or automation skills (Python, PowerS
• hell, Bash)Experience in research, higher education, healthcare, or similarly open computing e
• nvironmentsFamiliarity with SOAR tooling or automatio
• n platformsExperience with ISO27001:2022 or simila

Securit

y+)
Benefits

• Our Benefits:Salary: £60,000 - £70,000 (dependent on experience) + travel allo
• wance + bonusEnhanced holiday + options to buy ad
• ditiona
• l daysPensionL
• ife AssuranceInco
• me ProtectionPrivate Medi
• cal InsuranceHospi
• tal Cash PlanThe
• rapy Ser
• vicesPerk BoxElectr
• ic Car SchemeChil

dcare benefit
Working Together - Wha

• t It Involves:You must have the right to work permanently in the UK with a willingness to travel as necessary. In certain cases, we can consider sponsorship, and this will be assessed on a case
• -by-case basisYou will live in, or within easy commuting distance of, Oxford (or be willin