Jobgether
Senior Security Operations Engineer
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Senior Security Operations Engineer
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Operations Engineer based in United Kingdom.
This role offers the opportunity to turn advanced offensive security research into production-ready detection capabilities for modern application security.
You will build and maintain security checks designed to identify vulnerabilities, malware, and emerging attack patterns with high accuracy and low false-positive rates.
The position combines hands-on security research, detection engineering, testing, and continuous experimentation across evolving threat landscapes.
You will work with technologies including OpenGrep, JavaScript, Python, static analysis, cloud infrastructure, and CI/CD pipelines.
Your work will also extend into emerging areas such as AI security, LLM vulnerabilities, agentic systems, and MCP security.
Collaboration spans engineering, product, AI/ML, and infrastructure teams to ensure detection content is effectively developed, tested, and deployed.
This is a hands-on environment for an experienced security professional who enjoys solving complex problems and improving security capabilities at scale.
Accountabilities:
- Build and maintain production-ready security checks and detection content with a focus on accuracy, broad coverage, and low false-positive rates.
- Develop new detection rules, primarily using OpenGrep, to identify novel malware and vulnerability patterns.
- Research vulnerability classes, exploitation techniques, and emerging attack patterns and translate findings into effective production detections.
- Extend analysis capabilities to support additional programming languages and evolving application technologies.
- Triage analysis pipeline packages, investigate findings, and validate detection results.
- Develop attack-chain templates that combine lower-severity findings into higher-impact security scenarios.
- Create and maintain evaluation harnesses, benchmarks, and testing frameworks to measure detection coverage, accuracy, false-positive rates, exploit reproducibility, and regression performance.
- Investigate difficult or ambiguous findings and help maintain consistent detection quality across the platform.
- Apply established detection and exploitation principles while contributing to internal standards and methodologies.
- Experiment with new security tools and techniques for detecting threats and malware at scale.
- Monitor developments in application security, offensive security, AI security, LLM vulnerabilities, agentic systems, and MCP ecosystems and incorporate relevant insights into detection engineering.
- Collaborate with engineering, product, AI/ML, and infrastructure teams to develop, test, integrate, and operate detection content.
- Integrate detection, testing, and validation into cloud-native and CI/CD development environments.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Requirements:
- 5+ years of experience in offensive security or application security research, or equivalent experience, with a relevant bachelor's degree plus 2 years of experience.
- Broad programming knowledge, with strong JavaScript skills required and Python highly desirable.
- Strong understanding of vulnerability classifications, exploitation techniques, and common software weakness taxonomies.
- Experience writing detection logic for DAST scanners, fuzzers, or comparable security systems, including response interpretation and false-positive management.
- Hands-on web application penetration testing experience covering OWASP Top 10 vulnerabilities, authentication, authorization, business logic, REST, GraphQL, and related application security areas.
- Ability to research complex technical problems and work with algorithms and concepts such as Abstract Syntax Trees (ASTs).
- Experience building or maintaining testing frameworks, evaluation harnesses, or automated validation systems is highly valued.
- Familiarity with offensive security tools such as Burp Suite, sqlmap, nmap, ffuf, and custom payload-generation techniques.
- Understanding of HTTP and modern web protocols.
- Familiarity with cloud infrastructure, containers, CI/CD, and modern DevOps practices is advantageous.
- Fluent English communication skills, with the ability to explain technical concepts to both technical and non-technical audiences.
- Strong collaboration skills and good judgment around when to escalate complex or high-impact issues.
- Hands-on mindset, intellectual curiosity, and willingness to investigate both established application security challenges and emerging threats.
- OpenGrep or Semgrep experience, static analysis expertise, production system development experience, or exposure to LLMs and prompt engineering are advantageous.
- Security research contributions such as CVEs, advisories, technical talks, open-source tools, or technical writing experience are a plus.
- YARA experience is also beneficial.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Benefits:
- Fully remote working options.
- Health, pension, and statutory benefits tailored to the employee's country of residence.
- 24/7 Employee Assistance Program offering emotional support counseling, life coaching, dependent and elder care, financial and legal support, wellness coaching, and new-parent support.
- Quarterly Thrive-Wellness Days, providing one additional day off each quarter for company-wide rest and renewal.
- 5 days of paid volunteer time off each year.
- Paid birthday day off.
- Employee recognition and rewards programs.
- Opportunities for personal and professional growth and development.
- Flexible, globally oriented Total Rewards approach adapted to regional needs.
- Inclusive and collaborative environment supporting diversity and individuality.
How Jobgether Works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Why Apply Through Jobgether?
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location