This covers how we spot when something is wrong, how we respond when it is, and how we keep improving both.
It's a hands-on leadership role for the early stages, so you'll be setting things up and running them, not managing a large team from day one.
You'll design how we do detection and monitoring for security, decide the right mix of in-house work and outsourced support, and set up how alerts are handled and escalated.
You'll also lead how we respond to incidents, working closely with our engineering and reliability colleagues, since a lot of this sits alongside how they already keep our services running.
This is a deeply collaborative role.
In particular you'll work hand in hand with our site reliability engineering (SRE) team, since much of security monitoring and response builds on the same tooling and ways of working they already use to keep our services running.
We want to avoid heavy, siloed processes and instead build a lean, practical capability that fits how the rest of the business works, bringing in specialist help where it makes sense.
Job responsibilitiesSet up detection and monitoring for security across the platform and wider IT, including the tooling, dashboards and log sources needed to investigate quicklyDecide how much we run ourselves and where we use outsourced monitoring or response, and own that relationshipSet up how security alerts are handled, owned and escalated, starting with working-hours coverageLead how we respond to security incidents, including playbooks for the most likely scenarios, a single place of record, and regular practice exercisesWork with the reliability team on resilience and recovery, including backups, restore testing and disaster-recovery exercisesTriage vulnerabilities found in our running systems and infrastructure into a shared trackerRun exercises that test and improve our defences over timeAbout youSkills, exp.