Senior Security Operations Analyst

<div class="content-intro"><p><span style="font-size: 10pt;">Please note that we will never request payment or bank account information at any stage of the recruitment process. As we continue to grow our teams, we urge you to be cautious of fraudulent job postings or recruitment activities that misuse our company name and information. Please protect your personal information during any recruitment process. While Monks may contact potential candidates via LinkedIn, all applications must be submitted through our official website (<a class="c-link c-link--focus-visible" href="http://monks.com/careers" target="_blank" data-stringify-link="http://monks.com/careers" data-sk="tooltip_parent">monks.com/careers</a>).</span></p></div><h2><strong>About the Role</strong></h2> <p>We are looking for a Senior Security Operations Analyst to serve as our primary operational anchor for EMEA, bridging follow-the-sun operations across global time zones (APAC and the Americas). In this role, you will analyse security events, investigate potential threats, validate and manage high-priority incidents, and execute decisive containment actions to minimise overall impact while escalating unresolved incidents to security engineering teams.</p> <p>This person will monitor and remediate security incidents across on-prem, identity, and cloud-based environments for internal corporate infrastructure and enterprise client engagements. As the primary responder on shift during EMEA business hours, you should possess deep operational muscle memory, strong technical composure under pressure, and the initiative to challenge assumptions and propose continuous improvements. This is a remote role from either the UK, Ireland, or Poland.&nbsp;</p> <p>&nbsp;</p> <h3><strong>Responsibilities:</strong></h3> <ul> <li>Lead triage, scoping, containment, and eradication for medium-to-high severity security incidents across endpoint, identity, SaaS, and cloud environments.</li> <li>Perform deep-dive investigations, threat isolation, and query hunting leveraging CrowdStrike Falcon (Host Timeline, Real Time Response).</li> <li>Investigate identity compromises, phishing campaigns, and suspicious account activities using Google Admin Console (Investigation Tool, Email Log Search, Token Auditing).</li> <li>Analyse ingress edge telemetry, CDN traffic patterns, WAF events, and web server logs (including Cloudflare and Acquia application environments) to detect, trace, and mitigate web attacks, DDoS conditions, and botnet/scraping abuse.</li> <li>Maintain and continuously update incident response plans and runbooks for efficient incident response, collaborating with engineering to automate containment workflows.</li> <li>Coordinate cross-departmental remediation tasks and escalate unresolved incidents with clear technical root-cause analysis (RCA) aligned with MITRE ATT&amp;CK.</li> <li>Collaborate with content production for security awareness and mentorship.</li> </ul> <h2>&nbsp;</h2> <h2><strong>About You</strong></h2> <h3><strong>The essentials:</strong></h3> <ul> <li>5+ years of direct experience in Security Operations (SOC), Incident Response, or similar hands-on technical operational roles.</li> <li>Bachelor’s degree in Computer Science/Engineering/Information Security, or equivalent practical experience.</li> <li>Deep operational experience utilising CrowdStrike (investigation workflows, Host Timeline, Real Time Response, and query hunting).</li> <li>Proven experience leveraging Google Admin Console (Investigation Tool, Email Log Search, Token Auditing) for phishing, BEC, and identity investigations.</li> <li>Hands-on experience with industry-leading security tools across EDR, SWG, SIEM, and MDM platforms.</li> <li>Solid understanding of network protocols, traffic flow, and the OSI model.</li> <li>Experience with log analysis, malware triage, and digital forensics.</li> <li>Proven track record of operating autonomously during incidents with minimal supervision.</li> <li>Practical experience leveraging AI tools, LLMs, or agentic workflows to assist analysis, scripting, or automation.</li> <li>Working ITIL knowledge and functional familiarity with the MITRE ATT&amp;CK framework.</li> <li>Courteous, articulate, and educated in interpersonal delivery. Maintains a polite, respectful, and calm demeanor with internal teammates, leadership, and external clients even during incident bridges.</li> <li>Ability to confidently and politely present findings to technical and non-technical stakeholders.</li> <li>Self-directed, resourceful, and critical thinker with proactive problem-solving instincts.</li> <li>Strong personal anxiety management and self-organisation during high-pressure incidents.</li> <li>Eager to learn, experiment with emerging tooling, and actively suggest process enhancements.</li> </ul> <h3><strong>Not a must, but a plus:</strong></h3> <ul> <li>Demonstrated hands-on and reflexive triage/containment instincts over theoretical knowledge or paper certifications (certifications like CISSP, Sec+, or CEH are welcome, but secondary to proven live-fire execution).</li> <li>Experience analysing Cloudflare edge/WAF logs and Acquia/Drupal web server access logs for application-layer anomalies, scraping, and volumetric spikes.</li> <li>Hands-on experience with modern SIEM / SecOps platforms:</li> <li>Cloud security experience (GCP, AWS, Azure) in production environments.</li> <li>Scripting proficiency (Python, PowerShell, Bash) for automated triage and API data collection.</li> <li>Exposure to Blue/Red/Purple team simulation exercises.</li> </ul> <p>&nbsp;</p> <p class="p1">#LI-RE1 #LI-Hybrid</p> <p>&nbsp;</p><div class="content-conclusion"><p><span style="font-size: 10pt;"><strong>About Monks </strong></span></p> <p><span style="font-size: 10pt;">Monks is the global, digital-first, data-driven, unitary operating brand of S4Capital plc, where our culture centers on how we show up for the work and for one another. That begins with the commitment to strive for mastery—taking deep pride in our craft and creating work that sets the bar. In everyday execution, we drive momentum by choosing bold action rather than waiting for certainty. Above all, our teams are stronger together, bringing diverse perspectives into a unified team that communicates with clarity, trust, and mutual respect.</span><br><span style="font-size: 10pt;">&nbsp;</span><br><span style="font-size: 10pt;">This commitment to craft and innovation translates directly into widespread industry acclaim: Monks was named a Contender in The Forrester Wave™: Global Marketing Services and a leader in the 2026 Gartner® Magic Quadrant™ for Global Digital Marketing Agencies. It ranks among Cannes Lions' Top 10 Creative Companies (2022-25) and remains the only partner featured in AdExchanger’s Programmatic Power Players list every year (2020-24). Named Adweek’s first AI Agency of the Year (2023) and The One Show’s inaugural AI Pioneer Organization (2025), Monks was also awarded Business Intelligence Group’s 2026 Excellence in Artificial Intelligence Award in the Human-Machine Interaction Team category. Additionally, Monks.Flow earned AI-based Marketing Solution of the Year at the 2026 AI Breakthrough Awards and a 2026 Global Generative AI Award in the Agentic Marketing Innovation category. Finally, Monks achieved a record-breaking number of FWAs and continues to hold the most of any partner.</span></p> <p><span style="font-size: 10pt;">We are an equal-opportunity employer committed to building a respectful and empowering work environment for all people to freely express themselves amongst colleagues who embrace diversity in all respects. Including fresh voices and unique points of view in all aspects of our business not only creates an environment where we can all grow and thrive but also increases our potential to produce work that better represents—and resonates with—the world around us.&nbsp;</span></p></div>

Find Jobs in United Kingdom on Arbeitnow