Security operations lead

Remote with occasional travel to Bath/London/Edinburgh once a quarter

Seccl is the Octopus-owned embedded investment platform that’s on a mission to helping more people to invest – and invest well.

We’re B-Corp certified with an amazing product-market fit, impressive early traction and the potential to transform an outdated industry, for the better. We've been growing fast and will scale even faster over the next few years.

We’re also proud to be part of Octopus, the £multi billion group that's on a mission to breathe new life into broken industries, through companies like Octopus Energy, Octopus Investments and Octopus Money.

Check out the Seccl website for the latest on our products and our mission to shape the future of investments.

We’re looking for a Security operations lead to join our Infrastructure and Security team orting to the Director of engineering and security, you’ll work closely with IT, infrastructure and application teams, as well as an external security operations partner. This is an exciting opportunity to play a key role in strengthening and evolving our security operations as the business continues to grow.

You’ll have ownership of day-to-day security operations, incident response, and continuous improvement of our security capabilities to help protect Seccl and our customers.

The Infrastructure and Security team sits at the heart of Seccl’s technology organisation, ensuring the resilience, availability and security of our platform that underpins everything we do. The team’s mission is to enable the business to scale securely by embedding strong security controls, rapid threat detection and effective incident response into our day-to-day operations. With ongoing investment in cloud security, SIEM maturity and vulnerability management, the team is driving several key initiatives to continuously raise Seccl’s security posture.

You’ll be joining a collaborative, forward-thinking team that plays a critical role in protecting our customers, partners and the wider business.

• Overseeing day-to-day security operations, ensuring effective detection, investigation and response to security events

• Managing and tuning the SIEM platform to improve alert quality, coverage and operational effectiveness

• Working with an outsourced security operations partner to triage alerts and coordinate incident response

• Leading vulnerability management activities, prioritising remediation based on risk

• Collaborating with infrastructure, IT and application teams to embed effective security controls

• Integrating threat intelligence into detection and response workflows

• Monitoring and reporting on security metrics, incidents and trends to key stakeholders

• Have proven experience leading or managing security operations in a cloud-first environment, ideally AWS

• Are confident operating and improving a SIEM platform, with hands-on experience of tuning, rules and integrations

• Have experience working with outsourced SOC or security partners and managing alert triage and escalation

• Understand the full vulnerability management lifecycle and can prioritise remediation based on risk

• Have strong incident response skills and are comfortable leading investigations and post-incident reviews

• Can communicate clearly with both technical and non-technical stakeholders across the business

• Have experience with Microsoft Sentinel and Microsoft Defender security tools is desirable

• You rely on a lot of top-down direction. Here, you’ll have a lot of freedom and ownership of your role, and you’ll be expected to shape your own progression

• You’re not comfortable working in a fast-paced environment. Our speed and scalability are what set us apart; you need to be able to act quickly and think on your feet

• You struggle to follow through on ideas. We value people who do what they say they will. If you care about something, you have the freedom here to make it happen

• You don’t like change
  . You’ll get on great here if you relish the ambiguity of rapid growth and are willing to embrace uncertainty

We offer a generous mix of…