SecOps Engineer

Veriforce

1d•Hybrid

About The Position

The Security Operations (SecOps) Engineer monitors, detects, investigates, and responds to cybersecurity threats across the organisation’s infrastructure, cloud services, endpoints, identities, and business applications. The role supports continuous improvement in security monitoring, vulnerability management, incident response, governance, and operational security controls. Working with IT, engineering, and business stakeholders, the engineer helps protect organisational assets, data, and services and supports compliance with internal policies, security standards, and regulatory requirements. The organisation builds software that supports a global network of responsible buyers, suppliers, and partners. Its solutions help more than 50,000 organisations manage compliance, including standards related to health and safety, sustainability, and ethical behaviour.

Requirements

Hands-on experience triaging, investigating, and responding to security alerts or incidents.
Experience with Microsoft Entra ID, Microsoft Defender for Endpoint, and Microsoft Sentinel.
Advanced knowledge of back-office systems.
A good understanding of network technologies.
Previous experience building or maintaining infrastructure equipment on-premises and in a cloud environment.
Vulnerability management skills.
Microsoft 365 administration skills.
Windows Server skills.
Excellent customer service skills and telephone manner.
Ability to adapt and be flexible.
Ability to work under pressure and to tight timescales.
Enthusiastic and pragmatic approach.

Responsibilities

Monitor and investigate security alerts and incidents.
Conduct threat hunting using SIEM, EDR, and cloud security platforms.
Manage vulnerability scanning, assessment, prioritisation, and remediation tracking.
Develop and maintain security monitoring rules and detection logic.
Support incident response investigations and forensic activities.
Administer security platforms including Microsoft Defender XDR, Sentinel, Entra ID, and vulnerability management tools.
Review and improve security configurations across cloud and on-premises systems.
Support third-party risk assessments and supplier security reviews.
Assist with ISO 27001, SOC, Cyber Essentials, GDPR, and other compliance activities.
Develop security automation, scripts, and operational procedures.
Deliver security awareness guidance and support business stakeholders on security matters.
Manage disaster recovery plans and coordinate testing.
Assist the infrastructure team with firewall, network, and core infrastructure management.