Security Operator

Role overview

Responsibilities

• Monitor SIEM, IDS/IPS, EDR, and other security platforms for alerts and potential threats.
• Assess alert validity, severity, and impact; follow playbooks during initial incident response.
• Escalate complex or high-severity incidents and document events and actions taken.
• Provide stakeholder updates using AUROR and maintain SOC playbooks, knowledge articles, and standard procedures.
• Keep current with threats and technologies, improve SOC processes and tools, collaborate with IT and security teams, and follow security requirements.

Essential qualifications

• SIA Public Space Surveillance (CCTV) licence.
• Flexibility with working hours and a minimum commitment of 24 hours per week.
• Strong analytical and problem-solving skills, attention to detail, and ability to follow procedures.
• Good written and verbal communication and interpersonal skills; ability to work independently and in a team.
• Basic understanding of Windows, Google, and Linux operating systems and proficiency with computer systems and common office applications.

Desirable qualifications

• Previous security-related experience, such as a help desk role with a security focus or junior security analyst experience.
• Familiarity with security monitoring tools and SIEM systems, common threats and vulnerabilities, or ticketing systems.
• Relevant certifications such as CompTIA Security+ or Network+.

Working hours

• The role predominantly involves mornings and rotating weekdays.
• Advertised shift pattern: 5am–9am Wednesday to Friday and 5am–5pm Saturday or Sunday.
• Additional hours may be required in line with operational needs.

Work location

• Based at Travis Perkins Head Office, The Hub (Ryehill House), Rye Hill Close, Lodge Farm Industrial Estate, Northampton, NN5 7UA.