Security Operations Analyst

• Join Zopa as a Security Operations Analyst, working hybrid from London 2-3 days a week. • Help protect Zopa's banking services, systems and customers by investigating security threats and responding to incidents. • Work in a SecOps team that also owns and manages security tools and services, rather than focusing solely on monitoring and incident response. • Build experience beyond alert investigation, including vulnerability management, cloud security and other security technologies. • Learn alongside experienced analysts who share their knowledge and support your development. • Collaborate with engineering, IT, fraud and customer-facing teams to understand and respond to security risks across the business.

• Bring practical experience in security operations or a relevant technical environment such as infrastructure, network, cloud operations or IT support. • Show an understanding of cyber security fundamentals, including phishing, malware, account compromise, vulnerabilities, threats and risks. • Use security alerts or log analysis to investigate unusual activity. • Know the incident response lifecycle and follow documented procedures. • Know the basics of Windows, macOS, Linux and core networking concepts. • Understand basic cloud concepts, particularly AWS services such as IAM, S3 and CloudTrail. • Communicate clearly, document findings accurately and know when to escalate. • Prioritise security tickets and manage your time within agreed service levels.

• Use SIEM, EDR or security tools such as Splunk, SentinelOne, Netskope, Mimecast, Tenable or AWS GuardDuty. • Write basic scripts in Python, Bash or PowerShell. • Show practical experience with phishing investigations or vulnerability management. • Know the MITRE ATT&CK framework, FCA requirements and UK GDPR. • Hold a security certification such as CompTIA Security+, CySA+ or CEH, or a relevant degree.

• Review, triage and investigate security alerts, events and incident tickets. • Analyse security logs to identify suspicious activity, assess potential impact and decide next steps. • Investigate common threats including phishing, malware and account compromise. • Follow established incident response playbooks, escalating incidents and requesting support when needed. • Maintain accurate investigation notes, ticket updates and incident documentation. • Collaborate with IT Services, Identity and Access Management, engineering, fraud and customer service teams. • Take part in peer reviews and incident retrospectives, sharing lessons learned with colleagues. • Support improvements to security processes while developing your knowledge of vulnerability management, cloud security and security tooling.

• Work hybrid from the London office 2-3 days a week. • Work from abroad for up to 120 days a year, subject to having the right to work in your chosen country. • Gain hands-on experience with Splunk, SentinelOne, Netskope and AWS security services. • Learn from experienced analysts in a collaborative, supportive team. • Join a company named in the top three of the UK's Most Loved Workplaces. • Be part of a diverse culture of nearly 50 nationalities, with reasonable adjustments available in the hiring process.

Zopa began in 2005 as the first peer-to-peer lending company and launched Zopa Bank in 2020. It aims to put people front and centre in finance by listening to what customers dislike about banking and doing the opposite. Zopa has won industry awards and been named in the top three of the UK's Most Loved Workplaces.