{"id":3886912,"url":"https://alion.io/job/zopa-security-operations-analyst","title":"Security Operations Analyst","company":{"id":6054,"name":"Zopa","domain":"zopa.com","url":"https://alion.io/company/zopa","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":81,"open_postings":12,"ghost_share":0,"stale_share":0.667,"repost_share":0.167,"time_to_fill_p50_days":42,"computed_at":"2026-11-07T05:47:08Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon S3","optional":false},{"name":"AWS","optional":false},{"name":"Bash","optional":false},{"name":"GDPR","optional":false},{"name":"Git","optional":false},{"name":"IAM","optional":false},{"name":"Linux","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SentinelOne","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-11-06T15:52:28Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-07T05:08:09Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"The Team\nAt Zopa, our Security Operations team plays an important role in protecting our banking services, systems and customers. We're a collaborative team with a mix of technical experience and professional backgrounds, working together to investigate security threats, respond to incidents and continuously improve how we operate.\nUnlike traditional SOC teams focused solely on monitoring and incident response, our SecOps team also owns and manages a range of security tools and services. That means you'll have opportunities to develop experience beyond alert investigation, including vulnerability management, cloud security and other security technologies.\nYou'll work alongside experienced analysts who share their knowledge and support your development. You'll also collaborate with engineering, IT, fraud and customer-facing teams to understand and respond to security risks across the business.\nA Day In The Life:\nReview, triage and investigate security alerts, events and incident tickets.\nAnalyse security logs to identify suspicious activity, assess potential impact and determine appropriate next steps.\nInvestigate common threats including phishing, malware and account compromise.\nFollow established incident response playbooks, escalating incidents and requesting support when needed.\nMaintain accurate investigation notes, ticket updates and incident documentation.\nWork within defined response and resolution expectations for security tickets.\nCollaborate with IT Services, Identity and Access Management, engineering, fraud and customer service teams.\nDevelop practical experience with security technologies including Splunk, SentinelOne, Netskope and AWS security services.\nParticipate in peer reviews and incident retrospectives, sharing lessons learned with colleagues.\nSupport improvements to security processes and develop your understanding of vulnerability management, cloud security and security tooling.\nAbout You:\nYou have practical experience in security operations or a relevant technical environment such as infrastructure, network, cloud operations or IT support, along with a blend of the following:\nUnderstanding of cyber security fundamentals, including phishing, malware, account compromise, vulnerabilities, threats and risks.\nExperience reviewing security alerts or analysing logs to investigate unusual activity.\nKnowledge of the incident response lifecycle and can follow documented procedures.\nFoundational knowledge of Windows, macOS, Linux and core networking concepts.\nUnderstand basic cloud concepts, particularly AWS services such as IAM, S3 and CloudTrail.\nYou approach investigations analytically, gathering evidence and assessing potential impact before deciding what to do next.\nCommunication is one of your strengths; you communicate clearly, document your findings accurately and know when to escalate.\nYou can prioritise security tickets, manage your time and work within agreed service levels.\nYou're curious, eager to learn, comfortable asking for support and committed to working collaboratively.\nAdded Bonus:\nExperience using SIEM, EDR or security tools such as Splunk, SentinelOne, Netskope, Mimecast, Tenable or AWS GuardDuty.\nBasic scripting experience using Python, Bash or PowerShell.\nPractical experience with phishing investigations or vulnerability management.\nFamiliarity with the MITRE ATT&CK framework.\nExperience using Git or version control alongside engineering teams.\nExperience working in financial services, fintech or another regulated environment.\nAwareness of FCA requirements and UK GDPR.\nSecurity certifications such as CompTIA Security+, CySA+ or CEH, or a relevant degree.\nExperience safely using AI tools to support everyday work.","description_format":"text","description_chars":3715,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Crowdfunding & P2P Lending","Cards & Card Issuing","Digital Banks & Neobanks","Consumer Loans & Pawnshops"],"lifecycle":[{"event":"open","at":"2026-11-06T19:59:33Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"Licensed UK visa sponsor (Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Skilled Worker","cap_exempt":false,"checked_at":"2026-11-07T06:20:45+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.602,"p_room":1,"age_days":0,"expected_fill_days":42,"reasons":["conf:0","stale_co","win:early"],"computed_at":"2026-11-07T05:47:08Z"},"pay":null,"html_url":"https://alion.io/job/zopa-security-operations-analyst","json_url":"https://alion.io/job/zopa-security-operations-analyst.json","meta":{"generated_at":"2026-11-07T07:00:53Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1577,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6054},"rest":"https://alion.io/mcp/rest/get_company?id=6054"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fzopa-security-operations-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fzopa-security-operations-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fzopa-security-operations-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/zopa-security-operations-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fzopa-security-operations-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3886912}},{"tool":"search_jobs","arguments":{"company":"zopa.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3886912},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}