Security Operations & DevOps Engineer

Security Operations & DevOps Engineer

Organization Overview

Our Client is an established asset management organization specialising in innovative, tax-aware investment strategies and tailored solutions for investors. With a strong focus on quantitative investment approaches, the organization provides a technically driven environment where security, resilience and operational excellence are highly valued.

Our Client is looking for a hands-on professional with experience across security operations, cloud infrastructure and DevOps, supported by sound technical judgement, strong analytical ability and disciplined documentation practices.

Role Summary

This is an opportunity to join a forward-looking Technology team in a role that combines day-to-day security monitoring with the development and maintenance of secure, reliable cloud infrastructure. You will help protect the organization’s technology environment, improve the quality of security detection and response, and support robust operational controls.

The position offers meaningful exposure to AWS security, incident response, vulnerability management and infrastructure automation. Your work will contribute directly to operational resilience, audit readiness and the continuous improvement of the organization’s security posture.

Responsibilities

• Monitor, triage and investigate alerts across EDR/XDR, SIEM, CNAPP, email security and identity platforms.
• Tune detection rules, alert thresholds and suppression logic to improve signal quality and reduce false positives.
• Support incident response by gathering evidence, carrying out containment activities, documenting timelines and contributing to post-incident reviews.
• Manage vulnerability findings and endpoint monitoring, prioritising remediation according to risk and exploitability.
• Administer security tools, user access and permissions, including provisioning, deprovisioning, MFA enforcement and periodic access reviews.
• Secure and administer AWS infrastructure, including IAM, VPCs, VPNs, security groups, KMS, S3, EC2 and Lambda.
• Contribute to infrastructure-as-code and CI/CD pipelines using relevant tools and practices.
• Support backup, disaster recovery and business continuity planning and testing.
• Assist with vendor due diligence, third-party security reviews, policy assessments and the evaluation of new security tools.
• Develop automation and operational scripts using Python, PowerShell or Bash, including thoughtful use of AI tools to reduce repetitive work.
• Maintain runbooks, procedures, incident records and audit evidence for SOC 2 Type II reviews, regulatory examinations and client due diligence.
• Participate in an on-call and escalation rotation.

Essential Skills & Experience

• Practical experience in cybersecurity, cloud engineering, DevOps or software engineering, with an engineering or development background strongly welcomed.
• Experience working with AWS or another major cloud provider, including identity and access management, networking, logging, compute and storage services.
• Sound understanding of security fundamentals covering identity management, endpoint security, vulnerability management, network security and incident response.
• Hands-on experience with EDR/XDR, SIEM platforms and CNAPP technologies.
• Experience with infrastructure-as-code, Git and CI/CD pipelines.
• Scripting capability in Python, PowerShell or Bash, applied to practical operational automation.
• Understanding of secure coding principles and the security considerations associated with using AI tools.
• Strong troubleshooting, analytical and problem-solving skills.
• Clear written and verbal communication, with a consistent approach to accurate, audit-ready documentation.
• Sound judgement when deciding whether to act or escalate, together with discretion when handling sensitive information.

Desirable Skills & Experience

• Familiarity with Microsoft 365 and Entra ID.
• Exposure to security frameworks such as NIST CSF, CIS Controls or SOC 2.
• Experience with Terraform, OpenTofu, AWS CDK or CloudFormation.
• Relevant security or cloud certifications, such as AWS Certified Security – Specialty, GIAC GCIH, CompTIA Security+ or CompTIA CySA+.
• Experience supporting access recertification, third-party risk reviews or business continuity testing.
• Previous participation in an on-call or security escalation rota.

Call to Action

If you have the technical background and security mindset required for this opportunity, please apply by submitting your up-to-date CV.

Disclaimer: Any remuneration stated in this advertisement is indicative and will be dependent on the successful candidate’s experience, skills and qualifications. Final remuneration will be agreed with the successful candidate and will be subject to the terms of the contract.