Senior Security Operations Engineer

About us Risk Ledger is developing a network of connected organisations, all working together to defend against cybersecurity attacks in the supply chain. Organisations rely on us to establish trust, through sharing their security maturity and visualising the risks posed by their supply chain ecosystem. And we’re already trusted by customers like ASOS, British Airways, BAE Systems and the NHS. We are putting together an amazing and talented team from a diverse set of backgrounds and skillsets to drive us towards our vision. Risk Ledger is built on the respect we have for one another and our users, united by our shared values and mission. Every one of us is still learning: it’s how we grow as individuals. We’re curious. We’re ambitious. And we’re humble and honest. At Risk Ledger, we aim high to find the best solutions we can and always put our users first. The team: You’ll join the Director of Information Security supporting and collaborating with all parts of the business to deliver a secure environment enabling impactful outcomes for Risk Ledger and our customers. This role: As our Senior SecOps Engineer you’ll be playing a critical part in maintaining and evolving the security of our product, business tools, people, and organisation. This is an opportunity to have a huge long-standing impact through improving our technical security strategy, which will lead to even greater success for our business and our customers. In the short to medium term, your focus will be on improving operational security capability - enhancing detection and response, incident management, vulnerability management and cloud security operations. As these capabilities mature, you’ll increasingly focus on security engineering and architecture; designing scalable security services, improving our security platform and embedding secure-by-design principles across the organisation. From day one, you'll shape opportunities to empower our team by maintaining and improving the security of our tools and working practices for peak performance, all while safeguarding the confidentiality of our customers' data. Success hinges on collaboration, as you forge strong, trusted relationships across teams. In this role you will: Manage, build and mature our Security Operations capability (short to medium term) Own and continuously improve security monitoring, detection and incident response capabilities across our cloud, endpoint and SaaS environment. Build, tune, and maintain high-quality detections, reducing alert fatigue while increasing confidence that meaningful threats are identified quickly. Continuously improve vulnerability management through effective scanning, risk-based prioritisation, remediation and tracking. Improve our cloud security posture across AWS and GCP through strong identity management, telemetry, network security, encryption and continuous posture assessment. Develop and automate operational processes, playbooks and workflows that improve consistency and allow the team to scale efficiently. Support audit and compliance activities by ensuring operational controls are implemented, measurable and operating effectively. Evolve our Security Engineering capability (medium to long term) Design and engineer scalable security capabilities that improve visibility, detection, resilience and operational efficiency across the organisation. Architect and evolve our security telemetry and detection platform, transforming raw data into actionable security intelligence. Design security services, standards and reusable capabilities that can be adopted consistently across engineering teams. Lead technical security initiatives that improve the maturity of our security architecture and reduce long-term organisational risk. Partner closely with engineering teams to embed secure-by-design principles into systems and platforms. Evaluate emerging security technologies and identify opportunities to improve our overall security architecture through thoughtful adoption an…