SecOps Engineer

About the Company

The organization is a fast‑growing crypto‑focused firm delivering a globally regulated exchange, self‑custodial wallet, and browser extension to over 1 million users. They are committed to making crypto easy, rewarding, and enjoyable while maintaining strict compliance standards.

Location

Greater London (Remote – United Kingdom)

Job Type

Full‑time, permanent

Salary & Benefits

Competitive annual salary paid in British Pounds (£)
Performance‑based bonuses
Comprehensive health and wellbeing package
Pension scheme
Generous paid time off and holidays
Remote‑first working model with flexible scheduling
Professional development budget and continuous learning opportunities
Access to cutting‑edge crypto and security technologies

Job Responsibilities

Design, implement, and maintain security operations processes and tooling to protect the platform’s infrastructure, exchange, wallet, and browser extension.
Monitor security alerts, analyse incidents, and coordinate rapid response actions across engineering, compliance, and product teams.
Develop and continuously improve detection rules, playbooks, and automation for threat hunting and incident response.
Conduct root‑cause analysis of security events and produce detailed post‑mortem reports with actionable remediation recommendations.
Collaborate with the DevSecOps team to embed security controls into CI/CD pipelines, ensuring secure code deployment at scale.
Manage and tune security monitoring platforms (SIEM, IDS/IPS, EDR) to reduce false positives and increase detection fidelity.
Stay up‑to‑date with emerging threats, regulatory changes, and industry best practices, and proactively adjust security posture accordingly.
Lead security awareness initiatives and train cross‑functional teams on incident response procedures.
Participate in external audits and regulatory examinations, providing evidence of controls and remediation actions.

Essential Qualifications

Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent professional experience).
Professional certifications such as CISSP, CISM, GSEC, or similar are highly desirable.
Proven expertise with security monitoring tools (e.g., Splunk, Elastic, QRadar, SentinelOne, CrowdStrike).
Strong knowledge of networking, cloud security (AWS, GCP, Azure), and container security (Docker, Kubernetes).
Hands‑on experience with incident response frameworks, forensic analysis, and malware investigation.
Excellent scripting skills (Python, Bash, PowerShell) for automation of detection and response workflows.
Deep understanding of regulatory requirements related to crypto and financial services (e.g., FCA, GDPR, AML).
Effective communication skills, capable of translating technical findings for non‑technical stakeholders.

Desired Experience

Exactly 8 years of relevant security operations experience, demonstrating a progressive track record in protecting high‑value, high‑traffic financial platforms.
Prior experience in the cryptocurrency, fintech, or regulated financial services sector.
Experience building and scaling security operation centres (SOCs) in fast‑growing tech environments.
Familiarity with threat intelligence platforms and the ability to integrate external feeds into detection logic.
Demonstrated ability to lead cross‑functional incident response efforts and mentor junior security staff.

This search is conducted by Spear Point Search: The Search Firm For Capital Markets.

We are NOT incentivised to place. We are incentivised to be right. That means we tell clients when compensation is misaligned with the talent they need, we tell candidates when a role isn't what they think it is, AND we walk away from searches that don't have the conditions to succeed. This costs us fees. It is also why people call us back.