Security Operations Analyst

About the role

<div class="content-intro"><p><strong>About us</strong></p> <p>GoCardless is a <strong>global bank payment</strong> company. Over <strong>100,000 businesses</strong>, from start-ups to household names, use GoCardless to collect and send payments through direct debit, real-time payments and open banking. </p> <p>GoCardless processes <strong>US$130bn+</strong> of payments annually, across <strong>30+ countries</strong>; helping customers collect and send both <strong>recurring</strong> and <strong>one-off payments</strong>, without the chasing, stress or expensive fees. We use AI-powered solutions to improve payment success and reduce fraud. And, with open banking connectivity to over <strong>2,500 banks</strong>, we help our customers make faster, more informed decisions.</p> <p>We are headquartered in the<strong> UK</strong> with offices in <strong>London</strong> and <strong>Leeds</strong>, and additional locations in <strong>Australia, France, Ireland, Latvia, Portugal</strong> and the <strong>United States.</strong></p> <p>At GoCardless, we're all about <strong>supporting you</strong>! We’re committed to making our hiring process <strong>inclusive</strong> and <strong>accessible</strong>. If you need extra support or adjustments, reach out to your <strong>Talent Partner</strong> — we’re here to help! </p> <p>And remember: we don’t expect you to meet every single requirement. If you’re excited by this role, <strong>we encourage you to apply!</strong></p></div><p><strong>The role</strong></p> <p>As a Security Operations Analyst you will provide subject matter expertise on our security detection and response capabilities. We run a small, collaborative team, so you will be involved in the end-to-end process of Security Operations; from defining our security use cases through to incident response. </p> <p>Your background will ideally be in security operations. In any case, you will be experienced using SIEM tools to develop security monitoring cases and writing scripts to automate tasks and will have previous experience in incident response and threat management.</p> <p>We want people who can help make security part of our day-to-day operations, so you will be someone who enjoys working across team, function and group to improve the security posture of an organisation.</p> <p><strong>What excites you </strong></p> <ul> <li>Working closely with your Security Operations manager and team members, to ensure we take a data driven approach to presenting our security posture</li> <li>Analysing logs from multiple sources (SIEM, EDR, DLP, email) to identify and investigate security events and anomalies</li> <li>Running day-to-day security operations activities</li> <li>Providing technical support for first responder during normal business hours and outside of working hours if absolutely required</li> </ul> <p><strong>What excites us  </strong></p> <ul> <li>You have experience using SIEM tools to develop security monitoring cases and writing scripts to automate tasks</li> <li>You can demonstrate ability in using EDR, email analysis and other security tools</li> <li>You have good fundamental knowledge on information security </li> <li>You can demonstrate previous incident response experience</li> </ul> <p>We don’t expect you to meet every requirement. If you’re excited by this role, we encourage you to apply.</p> <p><strong&g