Security Operations Analyst, UK

Overview

In this role you will monitor and respond to security events across endpoints, cloud, and applications to protect Anduril’s defense technologies. You’ll act as incident commander with the Detection and Response team, refine detections and playbooks, and conduct threat hunting and data baselines to identify anomalies. You will collaborate with cross-functional partners to embed security controls, and guide junior analysts while maintaining strong stakeholder communications. This position offers impact at scale in a mission-driven, fast-paced environment.

Pay / Benefits

• equity grants
• top-tier benefits
• health and recovery support
• competitive compensation
• flexible work arrangements
• career development opportunities

Responsibilities

• Triage and respond to alerts/incidents across phishing, endpoints, cloud, and SaaS
• Build and optimize detection signatures, playbooks, and automation
• Lead feedback loop for detections to reduce false positives
• Participate in threat modeling across Cloud, Mobile, Endpoints, and other environments
• Threat hunting and data baselines to identify anomalies
• On-call rotation and incident response investigations with stakeholder communication
• Mentor and guide junior analysts; contribute to detection and response maturity

Key requirements

• Security monitoring, log analysis, and detection engineering across large data sets
• Python development contributing to automated SOC operations
• Experience with at least one SIEM language (SPL, KQL, SQL)
• Experience in data lake environment
• Knowledge across endpoint, network, identity, application, and cloud security
• TTPs across Windows, Linux, MacOS, AWS/Azure
• Strong communication with internal and external stakeholders
• Ability to obtain UK Security Clearance

• Strong communication
• Cross-functional collaboration
• Mentoring/leadership
• Python development
• Detection engineering
• SIEM languages (SPL, KQL, SQL)

…