Senior InfoSec Engineer

About Oxford Nanopore

Role overview

Key responsibilities

• Build blue-team and threat-hunting capability and harden security controls across the IT estate.
• Design, deploy, and harden configurations on enterprise IT devices.
• Triage and prioritize security alerts from SIEM, EDR, identity, cloud, and other monitoring sources.
• Investigate incidents through validation, scoping, containment, eradication, recovery, and post-incident review.
• Develop, tune, and validate detection logic, queries, rules, and dashboards.
• Work with the MSOC, Incident Response Team, and third parties configuring security platforms.
• Advise on security architecture, vendors, and service improvements; produce technical documentation.
• Use recurring findings to improve playbooks, detections, telemetry, response processes, and service reporting.

Experience and core qualifications

• Several years of hands-on SOC, CSIRT, detection engineering, incident response, or equivalent blue-team experience.
• Experience with security incident management and SIEM, SOAR, DLP, vulnerability management, and threat intelligence.
• Experience in a complex hybrid environment.

Preferred skills and experience

• Relevant undergraduate degree or equivalent relevant experience; similar engineer, analyst, or specialist role experience.
• Working knowledge of attack techniques, MITRE ATT&CK, incident handling, evidence preservation, and risk-based escalation.
• Cybersecurity certification such as OSCP, OSDA, CRTO, GPEN, CDSA, or similar.
• Vulnerability scanning experience, including InsightVM or Nexpose.
• Scripting or automation using Python, PowerShell, Bash, or comparable languages, including APIs or repeatable response steps.
• Threat intelligence tools, ISO 27001 environments, software engineering, or application security.

Personal qualities