Security Operations Analyst

🚀 We’re on a mission to make money work for everyone. We’re waving goodbye to the complicated and confusing ways of traditional banking. After starting as a prepaid card, our product offering has grown a lot in the last 10 years in the UK. As well as personal and business bank accounts, we offer joint accounts , accounts for 16-17 year olds , a free kids account and credit cards in the UK, with more exciting things to come beyond. Our UK customers can also save , invest and combine their pensions with us. With our hot coral cards and get-paid-early feature, combined with financial education on social media and our award winning customer service, we have a long history of creating magical moments for our customers! We’re not about selling products - we want to solve problems and change lives through Monzo ❤️ 📍 London/Cardiff/UK Remote | 💰£40,000 - £55,000 + Incentive Awards tied to your performance | Benefits ✨ ⭐Our Security Operations team To make money work for everyone, we must protect our customers, our data, and our systems. You will join our Security Operations Squad to detect threats, respond to incidents, and improve our defences without disrupting the people who use our bank. You can read about how we scale security detection here . We want you to join us if you want to specialise in Incident Response. You do not need to be an Incident Lead right now. You will work alongside our senior team members to investigate security events, from the initial alert through to recovery. As you build your skills and confidence, we will support you to lead these responses. We protect our team from alert fatigue by taking a proactive approach. You will hunt for new threats and automate our detection methods. We give you the tools and autonomy to automate repetitive tasks, which gives you the time to focus entirely on the analytical work of tracking and stopping advanced adversaries. We invest heavily in the people who protect the bank. We actively monitor workloads to prevent alert fatigue, we run blameless incident reviews, and we support each other. You do not need to master every security domain on day one. We will give you the mentorship, resources, and time to learn and develop your skills. 🔑 You’ll play a key role by... Investigating security events. You'll work alongside our senior team members to navigate incidents across our network, endpoints, and cloud systems. You'll play an active role from the initial alert through to recovery, and as you build your skills and confidence, we will support you to lead these responses. Proactively hunting for threats. You test theories about how attackers might target us and search for hidden threats across our systems before they trigger alerts. Spotting real threats. You fine-tune our alerts so we only spend time looking at genuine risks. You use these alerts to drive your incident response investigations, focusing your energy on stopping attackers. Automating repetitive work. You build automations that handle routine tasks, giving the squad time to focus on complex, analytical challenges. Learning from past incidents. You run blameless reviews after incidents to find the root cause, using those lessons to improve our security controls across the business. Tracking threat intelligence. You research the attackers that pose a risk to us and turn that knowledge into active, automated defences. 🤩 We’d love to hear from you if… You have hands-on incident response experience. You have worked in a Security Operations Centre (SOC) and feel confident investigating security events and supporting the wider team during complex incidents. You understand systems and networks deeply. You know how operating systems (macOS, windows, Linux) and networks work under the hood, and you understand modern attack methods. You automate your workflows. You hate doing the same manual task twice and have experience using scripting languages (like Python or Go) to bu ... (truncated, view full listing at source)