Security Operations Analyst

Our Story Hello there. We’re Zopa. We started our journey back in 2005, building the first ever peer-to-peer lending company. Fast forward to 2020 and we launched Zopa Bank. A bank that listens to what our customers don’t like about finance and does the opposite. We’re redefining what it feels like to work in finance. Our vision for a new era of banking puts people front and centre — we’ve built a business that empowers everyone to aim high, every day, to move finance forward. Find out more about our fantastic offerings at Zopa.com! We’re incredibly proud of our achievements and none of it would be possible without the amazing team here. It’s not just industry awards we’re winning, we’ve also been named in the top three UK’s Most Loved Workplaces. If you embrace unconventional challenges, are unafraid to think differently and are driven to make an outsized impact, you’ll thrive here at Zopa, so join us, and make it count. Want to see us in action? Follow us on Instagram @zopalife The Team At Zopa, our Security Operations team plays an important role in protecting our banking services, systems and customers. We're a collaborative team with a mix of technical experience and professional backgrounds, working together to investigate security threats, respond to incidents and continuously improve how we operate. Unlike traditional SOC teams focused solely on monitoring and incident response, our SecOps team also owns and manages a range of security tools and services. That means you'll have opportunities to develop experience beyond alert investigation, including vulnerability management, cloud security and other security technologies. You'll work alongside experienced analysts who share their knowledge and support your development. You'll also collaborate with engineering, IT, fraud and customer-facing teams to understand and respond to security risks across the business. A Day In The Life: • Review, triage and investigate security alerts, events and incident tickets. • Analyse security logs to identify suspicious activity, assess potential impact and determine appropriate next steps. • Investigate common threats including phishing, malware and account compromise. • Follow established incident response playbooks, escalating incidents and requesting support when needed. • Maintain accurate investigation notes, ticket updates and incident documentation. • Work within defined response and resolution expectations for security tickets. • Collaborate with IT Services, Identity and Access Management, engineering, fraud and customer service teams. • Develop practical experience with security technologies including Splunk, SentinelOne, Netskope and AWS security services. • Participate in peer reviews and incident retrospectives, sharing lessons learned with colleagues. • Support improvements to security processes and develop your understanding of vulnerability management, cloud security and security tooling. About You: You have practical experience in security operations or a relevant technical environment such as infrastructure, network, cloud operations or IT support, along with a blend of the following: • Understanding of cyber security fundamentals, including phishing, malware, account compromise, vulnerabilities, threats and risks. • Experience reviewing security alerts or analysing logs to investigate unusual activity. • Knowledge of the incident response lifecycle and can follow documented procedures. • Foundational knowledge of Windows, macOS, Linux and core networking concepts. • Understand basic cloud concepts, particularly AWS services such as IAM, S3 and CloudTrail. • You approach investigations analytically, gathering evidence and assessing potential impact before deciding what to do next. • Communication is one of your strengths; you communicate clearly, document your findings accurately and know when to escalate. • You can prioritise security tickets, manage your time and work within agreed service levels. • You're curious, eager to learn, comfortable asking for support and committed to working collaboratively. Added Bonus: • Experience using SIEM, EDR or security tools such as Splunk, SentinelOne, Netskope, Mimecast, Tenable or AWS GuardDuty. • Basic scripting experience using Python, Bash or PowerShell. • Practical experience with phishing investigations or vulnerability management. • Familiarity with the MITRE ATT&CK framework. • Experience using Git or version control alongside engineering teams. • Experience working in financial services, fintech or another regulated environment. • Awareness of FCA requirements and UK GDPR. • Security certifications such as CompTIA Security+, CySA+ or CEH, or a relevant degree. • Experience safely using AI tools to support everyday work. At Zopa we value flexible ways of working. We value face-to-face collaboration and a good work-life balance. This hybrid role requires you to come to our London office 2-3 days a week. You'll also have the option of working from abroad for up to 120 days a year!* But no matter where you are, we’ll make sure you’ve got everything you need to thrive, both in your work and home life, from day one. *Subject to having the right to work in the country of choice Diversity Statement Zopa is proud to offer a workplace free from discrimination. Diversity of experience, perspectives, and backgrounds leads to better products for our customers and a unique company culture for our people. We are made up of nearly 50 nationalities, have a DE&I forum made up of Zopians wanting to make a difference and we are proud of our culture where everyone can bring their full self to work. Our approach to DE&I is reflected in our hiring process so please let us know if you require any reasonable adjustments. Our approach to AI in interviews At Zopa, AI isn't something we're testing out — it's part of how we work every day. As a proud partner of Jobs 2030, we're committed to building AI fluency across our