Senior Security Operations Analyst

Lendable is on a mission to build the world's best technology to help people get credit and save money. We're building one of the world's leading fintech companies and are off to a strong start: one of the UK's most exciting unicorns with a team of over 800 people, among the fastest-growing tech companies in the UK, profitable since 2017, backed by top investors including Balderton Capital and Goldman Sachs, loved by customers with the best reviews in the market (4.9 across 10,000s of reviews on Trustpilot).

As a Senior Security Operations Analyst, you will triage and respond to security alerts, help improve the quality of the detections behind them, and lead the response when a security event becomes an incident.

Responsibilities

• Alert Triage & Monitoring:

Triage and investigate alerts across SIEM, EDR, identity and cloud tooling, taking escalations from MSSP's first-line team. Reduce false positives and alert fatigue by tuning detection rules, thresholds and suppressions. Utilise AI and automation to speed up triage, enrichment and response.

• Incident Command & Response:

Command security incidents, coordinating technical response, decision-making and communications across Engineering, IT, Legal, Risk and senior stakeholders. Lead or support technical investigation and containment across endpoint, identity and cloud environments. Run blameless post-incident reviews, track actions to closure, and feed lessons back into detection, playbooks and controls.

• Operational Reporting & Assurance:

Track and report SecOps metrics, such as alert quality, time to triage, time to contain, incident volumes and root causes. Maintain accurate incident records and evidence in incident management platform.

Requirements

• Proven incident command: Demonstrable experience leading significant security incidents as Incident Commander or lead responder.
• Technical investigation skills: Solid hands-on SOC/DFIR experience, including log analysis, endpoint and identity investigation, and cloud incident response in AWS or GCP.
• AI fluency: Understanding of how AI use creates security risk, including data exposure, agent misuse and AI-assisted attacks.

Benefits

• Flexible working: Hybrid roles require three days in-office weekly.
• Health coverage: Support for physical and mental wellbeing, including private health cover.
• Retirement & savings: Long-term financial wellbeing through retirement savings plans.
• Employee referral programme: Earn a competitive bonus when referring successful new team members.
• Office meals & snacks: Enjoy a fully stocked kitchen, plus complimentary lunches prepared by in-house chefs on in-office days.