Weare looking for a Security Operations Lead to own the Security Operations pillar within our Cybersecurity function, working alongside Architecture and Engineering, Security Governance, and Security Threat and Incident Management. This is a lean, senior team working in close partnership with IT Infrastructure, Compliance, and Legal. The role owns day-to-day delivery across monitoring and detection, threat intelligence, vulnerability management, security awareness, and posture reporting, supported by a Security Operations Analyst, and manages the relationship with an external managed SOC that provides 24/7 monitoring coverage.
Assess the security of AI-powered features and internal AI tooling — prompt injection, unsafe tool/agent invocation, data leakage and over-permissive integrations.
· Conduct and oversee investigations into incidents, losses, breaches, and irregularities, and prepare clear reports with supporting evidence and corrective recommendations.
Work closely with MNC customers to deliver high-quality managed services, ensuring SLA adherence and continuous improvement including Following ITiL processes.
Apply AWS security best practices for authentication and authorization, data handling, least privilege, encryption, micro-segmentation, tagging strategy, and API/MCP integration.
You will conduct threat modeling sessions, security risk assessments, and architectural reviews to identify vulnerabilities and design pragmatic mitigations alongside delivery teams.