{"id":643881,"url":"https://alion.io/job/teya-senior-secops-specialist","title":"Senior SecOps Specialist","company":{"id":684703,"name":"Teya","domain":"teya.com","url":"https://alion.io/company/teya","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":78,"open_postings":27,"ghost_share":0,"stale_share":0.889,"repost_share":0,"time_to_fill_p50_days":43,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom","Porto, Portugal"],"countries":["GB","PT"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":121000,"max_usd":221000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":36},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Git","optional":false},{"name":"Jira","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"AWS","optional":true},{"name":"CI/CD","optional":true},{"name":"Crowdstrike","optional":true},{"name":"Exabeam","optional":true},{"name":"Okta","optional":true},{"name":"Rest API","optional":true},{"name":"Splunk","optional":true}],"status":"closed","first_seen_at":"2026-08-10T09:31:34Z","employer_posted_date":"2026-09-23","last_verified_at":"2026-10-28T11:46:37Z","board_verified":false,"closed_at":"2026-10-28T11:46:37Z","days_open":79,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":79},"description":"Hello. We’re Teya.\nTeya was founded on a simple belief: local businesses deserve better.\nThey are the cafés, restaurants, salons, shops and entrepreneurs that bring character to our high streets, create jobs and keep communities moving. Yet for too long, financial services has made life harder for them - with clunky tools, poor support and complexity that gets in the way of running a business.\nTeya exists to change that.\nWe’re building a financial platform for local businesses across Europe - one built around simple tools, thoughtful design and real human support. Our Members rely on us to help them run their business with confidence, and that responsibility shapes the way we work.\nWe move fast. We care about quality. We stay close to the detail. And we believe great performance and genuine hospitality should go hand in hand.\nIf you want to build meaningful products, solve real problems and make a genuine difference for local businesses, we’d love to hear from you\nYour Mission\nAs a SecOps Specialist, you protect Teya by detecting, investigating, and responding to security incidents while ensuring our security operations are reliable, scalable, and continuously improving.\nYou will lead complex SOC investigations, provide L3 support, maintain and improve core security tooling, and build automations and integrations that increase speed, consistency, and quality across security operations.\nYou will work closely with Security Engineering, IT, Infrastructure, Platform, Cloud, and Product teams to reduce risk and embed security effectively across the organisation.\nYou operate across incident response, detection engineering, security tooling, vulnerability management, threat intelligence, telemetry, and automation - turning operational insight into stronger controls and better engineering outcomes.\nResponsibilities\nSecurity Operations & Incident Response\nLead end-to-end investigation and response of complex security incidents.\nAct as L3 escalation point for SOC analysts and MSSP.\nCoordinate across Security, Engineering, IT, Cloud, Legal, and Compliance during\nincidents.\nMake clear, risk-based decisions under pressure with strong documentation.\nMaintain playbooks, runbooks, and incident workflows.\nDrive post-incident reviews and ensure improvements are implemented and follow-ups\ncompleted.\nSupport incident metrics (MTTD, MTTR, recurrence, etc.)\nSOC Tooling & Platform Operations\nOperate and improve SIEM, EDR, email security, case management, and vulnerability\ntools.\nMonitor health, coverage, data quality, and integrations.\nTroubleshoot ingestion, parsing, API, and configuration issues.\nBuild and maintain integrations between security tools and internal systems.\nManage upgrades, changes, access reviews, and documentation.\nApply engineering practices (version control, testing, peer review, rollback).\nReduce operational toil through automation and simplification.\nVulnerability Management\nAnalyse and prioritise vulnerabilities based on risk and exploitability.\nWork with Engineering and IT to drive remediation.\nTrack fixes, validate resolution, and escalate high-risk issues.\nImprove vulnerability workflows and automation.\nIdentify recurring issues and recommend preventative controls.\nDetection Engineering\nBuild, test, and maintain detection rules, queries, and correlation logic.\nManage full detection lifecycle (build → test → tune → measure → retire).\nUse version control and detection-as-code where possible.\nReduce false positives and improve detection quality and coverage.\nMap detections to threat behaviours (e.g. MITRE ATT&CK).\nValidate detections through testing, incidents, and simulations.\nLog & Telemetry Management\nOnboard and maintain log sources across cloud, identity, endpoint, network, and SaaS.\nEnsure logs are complete, reliable, and usable for detection and investigation.\nTroubleshoot ingestion, parsing, schema, and data quality issues.\nBuild validation and monitoring for telemetry pipelines.\nOffboard unused sources safely with documented impact.\nImprove telemetry coverage by working with engineering teams.\nThreat Intelligence\nMonitor threats, vulnerabilities, and attacker techniques.\nTranslate intelligence into detections, investigations, and remediation actions.\nAssess relevance to Teya’s environment and risk profile.\nShare actionable insights with relevant teams.\nImprove security posture using trends and intelligence.\nGather and utilize intelligence for Shadow AI use-cases.\nCross-Functional Delivery\nPartner with Engineering and Platform teams on security requirements.\nManage security work in Jira with clear scope and ownership.\nSupport security projects (tooling, integrations, telemetry, controls).\nContribute to technical design discussions.\nProduce clear technical documentation and workflows.\nCommunicate effectively with technical and non-technical stakeholders.\nAutomation & Engineering\nAutomate SOC and security operations workflows.\nBuild scripts, integrations, and event-driven automations using APIs and cloud services.\nApply secure engineering practices (testing, logging, secrets management, error\nhandling).\nUse version control and peer review for automation and detection content.\nMonitor and improve automation reliability.\nExplore AI/automation opportunities to reduce manual effort.\nDefine and track operational and security metrics.\nRequirements\n7+ years in SOC, incident response, detection engineering, or security engineering.\nExperience leading complex security incidents end-to-end.\nStrong hands-on experience with SIEM, EDR, and security tooling.\nExperience building and tuning detections and queries.\nExperience with log onboarding, telemetry pipelines, and data quality issues.\nStrong vulnerability management and remediation experience.\nSolid understanding of attack techniques, cloud, endpoint, identity, and network security.\nHands-on scripting/automation (Python, PowerShell, Bash, etc.).\nExperience with APIs, integrations, and automation workflows.\nFamiliarity with Git and engineering practices (testing, review, deployment).\nExperience using Jira or similar tools for operational delivery.\nStrong communication and documentation skills.\nAbility to work independently and make decisions under pressure.\nNice-to-Haves\nFintech or regulated industry experience.\nAWS or cloud-native security experience.\nExperience with tools like Exabeam, Splunk, CrowdStrike, Okta, etc.\nSOAR or security automation experience.\nThreat hunting, purple teaming, or detection-as-code experience.\nCI/CD, IaC, or DevSecOps exposure.\nREST APIs, OAuth, secrets management experience.\nSecurity certifications (GCIA, GCIH, CISSP, etc.).\nWays of Working\nOwnership: You own outcomes, not just tasks.\nCalm under pressure: You stay structured in incidents.\nRisk-based thinking: You prioritise what reduces real risk.\nEngineering mindset: You build scalable, maintainable solutions.\nCollaboration: You work effectively across teams.\nCuriosity: You dig into root causes and system behaviour.\nAutonomy: You operate independently but escalate appropriately.\nImpact-driven: You focus on measurable security improvement.\nHigh craft standard: You value quality in detections, tooling, and documentation.\nReuse over reinvention: You build for scale and repeatability.\nContinuous learning: You stay current with threats and technology.\nAI-aware: You look for safe, practical AI first automation opportunities\nThe Perks\nWe trust you, so we offer flexible working hours, as long it suits both you and your team;\n\nHealth Insurance;\n\nPhysical and mental health support through our partnership with MyFitness;\n\n25 days of Annual leave (+ Bank Holidays);\n\nPossibility to visit other Teya offices to meet colleagues in instances when travel is safe and appropriate;\n\nFriday lunch in the office;\n\nFriendly, comfortable and high-end work equipment and informal office environment;\n\nHybrid work mode policy.\n\nTeya is proud to be an equal opportunity employer.\nWe are committed to creating an inclusive environment where everyone regardless of race, ethnicity, gender identity or expression, sexual orientation, age, disability, religion, or background can thrive and do their best work. We believe that a diverse team leads to better ideas, stronger outcomes, and a more supportive workplace for all.\nIf you require any reasonable adjustments at any stage of the recruitment process whether for interviews, assessments, or other parts of the application-we encourage you to let us know. We are committed to ensuring that every candidate has a fair and accessible experience with us.","description_format":"text","description_chars":8548,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Annual leave","Continuous learning","Flexible schedule","Health insurance","Hybrid work"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"},{"name":"Portugal","iso":"PT","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Commerce","Financial Services","POS Systems","Business & SME Lending"],"lifecycle":[{"event":"open","at":"2026-09-10T20:11:05Z"},{"event":"close","at":"2026-10-28T11:46:37Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Skilled Worker, Senior or Specialist Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Skilled Worker; Global Business Mobility: Senior or Specialist Worker","cap_exempt":false,"checked_at":"2026-10-31T06:23:40+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":null,"pay":null,"html_url":"https://alion.io/job/teya-senior-secops-specialist","json_url":"https://alion.io/job/teya-senior-secops-specialist.json","meta":{"generated_at":"2026-11-02T17:47:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24722,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":684703},"rest":"https://alion.io/mcp/rest/get_company?id=684703"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fteya-senior-secops-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fteya-senior-secops-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fteya-senior-secops-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/teya-senior-secops-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fteya-senior-secops-specialist"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":643881}},{"tool":"search_jobs","arguments":{"company":"teya.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":643881},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}