Security Operations Analyst

GoCardless is a global bank payment company. Over 100,000 businesses, from start-ups to household names, use GoCardless to collect and send payments through direct debit, real-time payments and open banking. 

GoCardless processes US$130bn+ of payments annually, across 30+ countries; helping customers collect and send both recurring and one-off payments, without the chasing, stress or expensive fees. We use AI-powered solutions to improve payment success and reduce fraud. And, with open banking connectivity to over 2,500 banks, we help our customers make faster, more informed decisions.

We are headquartered in the UK with offices in London and Leeds, and additional locations in Australia, France, Ireland, Latvia, Portugal and the United States.

At GoCardless, we're all about supporting you! We’re committed to making our hiring process inclusive and accessible. If you need extra support or adjustments, reach out to your Talent Partner — we’re here to help! 

And remember: we don’t expect you to meet every single requirement. If you’re excited by this role, we encourage you to apply!

As a Security Operations Analyst you will provide subject matter expertise on our security detection and response capabilities. We run a small, collaborative team, so you will be involved in the end-to-end process of Security Operations; from defining our security use cases through to incident response. 

Your background will ideally be in security operations. In any case, you will be experienced using SIEM tools to develop security monitoring cases and writing scripts to automate tasks and will have previous experience in incident response and threat management.

We want people who can help make security part of our day-to-day operations, so you will be someone who enjoys working across team, function and group to improve the security posture of an organisation.

• Working closely with your Security Operations manager and team members, to ensure we take a data driven approach to presenting our security posture
• Analysing logs from multiple sources (SIEM, EDR, DLP, email) to identify and investigate security events and anomalies
• Running day-to-day security operations activities
• Providing technical support for first responder during normal business hours and outside of working hours if absolutely required

• You have experience using SIEM tools to develop security monitoring cases and writing scripts to automate tasks
• You can demonstrate ability in using EDR, email analysis and other security tools
• You have good fundamental knowledge on information security 
• You can demonstrate previous incident response experience

We don’t expect you to meet every requirement. If you’re excited by this role, we encourage you to apply.