Security Operations Analyst

In this role, you join Zopa’s Security Operations team to protect banking services, systems and customers. You will investigate alerts, analyze logs and respond to incidents, while expanding hands-on experience with security tech and cloud security. You’ll collaborate across IT, engineering and fraud teams to strengthen risk controls and process improvements. This is a hybrid London opportunity with scope to contribute to a fast-growing fintech culture that values learning and cross-functional impact.

• hybrid role
• London office 2–3 days a week
• option to work from abroad up to 120 days a year
• flexible ways of working
• focus on work-life balance
• supportive, diverse culture

• Review, triage and investigate security alerts, events and incident tickets
• Analyze security logs to identify suspicious activity and determine next steps
• Investigate threats such as phishing, malware and account compromise
• Follow incident response playbooks and escalate where needed
• Maintain investigation notes, ticket updates and incident documentation
• Work within defined response and resolution SLAs for security tickets
• Collaborate with IT Services, IAM, engineering, fraud and customer service teams
• Develop experience with security technologies (e.g., Splunk, SentinelOne, Netskope, AWS security services)
• Participate in peer reviews and incident retrospectives to share lessons
• Support improvements to security processes and vulnerability management and cloud security

• Practical experience in security operations or a relevant technical environment (infrastructure, network, cloud operations, or IT support)
• Understanding of cyber security fundamentals (phishing, malware, account compromise, vulnerabilities, threats and risks)
• Experience reviewing security alerts and analyzing logs
• Knowledge of incident response lifecycle and following documented procedures
• Foundational knowledge of Windows, macOS, Linux and core networking concepts
• Basic cloud concepts, especially AWS IAM, S3 and CloudTrail
• Analytical, evidence-based approach to investigations
• Clear documentation and effective escalation communication
• Ability to prioritize security tickets and manage time within service levels
• Collaborative mindset and willingness to learn

• Clear communication
• Analytical mindset
• Curiosity and eagerness to learn
• Splunk
• SentinelOne
• Netskope