3. Security Operations & Incident Response

• Incident Response (IR): Own full lifecycle:
  • Detection.
  • Triage.
  • Containment.
  • Eradication.
  • Recovery.
  • Post-incident reviews. Author runbooks, playbooks, and escalation procedures.
• Threat Intelligence:
  • Investigate via root cause analysis.
  • Operate MITRE ATT&CK, NIST CSF frameworks.
  • Chase attacker TTPs and turn threats into defensive improvements.
• Vulnerability Management:
  • End-to-end programme—scanning, prioritisation, remediation tracking, SLA enforcement and executive reporting.
• Application/API Security:
  • Assess internal apps, third-party integrations, payment flows, and authentication systems.
  • Find both mag司️dᾛl security holes and product abuse scenarios.

4. Identity, Access & Endpoint Security

• Zero Trust & IAM:
  • Build and enforce identity strategies: SSO, MFA, SAML, OAuth, SCIM, conditional access, passwordless.
  • Deploy least-privilege access policies across systems.
• Endpoint Security:
  • Harden/manage Windows/macOS endpoints: Patching, disk encryption, MDM, compliance postures.
• Access Governance:
  • Design and run access review programmes.
  • Remove risk of orphaned accounts, shadow IT, and over-provisioned access.

5. Governance, Risk & Compliance

• Build the entire framework: Policies, controls, and standards aligned with:
  • ISO 27001.
  • SOC 2.
  • Cyber Essentials.
  • GDPR. (This role literally creates the function—your work sets industry benchmarks.)
• Audit & Compliance:
  • Maintain continuous readiness.
  • Collect evidence for controls; test gap analysis.
  • Deliver clear audit answers with supporting documentation.
• Risk Management:
  • Threat model, amend risk registers, drive treatment plans to reduce residual risk.
• Documentation:
  • Create and preserve the full security knowledge base:
    • Architecture diagrams.
    • Tool configurations (SIEM, EDR).
    • Runbooks, incident reports, process maps, policy libraries.
• Security Awareness:
  • Drive culture and education: Phishing drills, training campaigns, security inductions, policy communication.

Requirements

Essential

✅ 6+ Years in security engineering, enterprise SOC operations, or security strategy with a track record of significantly boosting security maturity or building teams from scratch.

✅ Hands-on experience with enterprise security tooling:

• EDR/XDR (CrowdStrike, SentinelOne).
• SASE/SWG (Netskope, Zscaler).
• SIEM, DLP, email security systems, endpoint privilege management, MDM.

✅ Zero Trust expertise:

• Identity: SSO, SAML, MFA, OAuth 2.4, SCIM, passwordless in production at scale.
• Least-privilege architecture and conditional access policy design.

✅ Incident Response:

• Led full IR lifecycle—detection, containment, post-incident reviews.
• Frequently needed to promote zero trust and defend against real-world breaches.

✅ Automation & scripting:

• Python, Bash, PowerShell for operations at scale:
  • SIEM tuning.
  • Detection rule automation.
  • Compliance checks.

✅ Governance & Compliance:

• Experience writing policies and implementing controls.
• Prepared for ISO 27001, SOC 2, Cyber Essentials, GDPR audits (represented team).
• Shouldn’t just know frameworks like MITRE ATT&CK, NIST CSF, CIS Controls, OWASP.

✅ Cloud Security:

• Secured AWS-heavy environments, SaaS integrations.
• Preferred: cloud-native security experience (GaurdDuty, Security Hub).

✅ Strategic Thinker:

• Ability to balance security rigor with business enablement and sell policies at senior levels.

Highly Desirable

🔹 iGaming/Fintech background: Understanding of gaming regulations, player data protections, and tech stack nuances. 🔹 Application Security: API security testing, secure SDLC, product security in platform businesses. 🔹 Hands-on SIEM Detection Engineering with:

• MITRE ATT&CK correlation.
• Dashboard building.
• Alert tuning. 🔹 CISM, CISSP, or GIAC certifications (CCFA/CCFR, GSEC/GCIA—anything prestigious). 🔹 Cloud security tooling like *Orgs and DLP platforms. 🔹 Team-builder/mentee: Experience shaping security culture at scale.

What We Offer

• Competitive pay and tailored rewards for a visionary.
• Leave that works for you: extra PTO days + birthday leave.
• Generous family leave: 4 weeks paid for parents-to-be.
• Well-being support: International health/life insurance.
• Professional growth: Wellness incentives + growth stipend for your development.
• Flexibility: Modern workplace with localisation options.
• Community: Join an elite, multicultural team with playfulness and productivity.
• Inclusivity: MrQ is committed to diversity, equity, and accessibility—your voice at the table matters.
• The challenge: this isn’t maintenance—it’s building something new and game-changing.

Endnote: FYI, our HR team will pass your CV to all security business playbooks—if you’re curious, apply to any of our multi-discipline roles. We’ll find a way to make your job work.