Security Specialist (SOC & IR)

Overview

In this role you protect ASOS from cyber threats and continuously strengthen our security posture. You’ll work within the Security Operations team to investigate, triage, and resolve incidents while improving detection and response processes. You’ll be hands-on, collaborate across teams, and share knowledge to build a stronger security culture. This position offers opportunities to influence incident management, threat hunting, and automation initiatives at scale.

Pay / Benefits

• employee discount
• employee sample sales
• 25 days paid annual leave + extra day
• private medical care scheme
• fixed annual payment bonus
• personalised learning opportunities

Responsibilities

• Monitor endpoints and triage security alerts, guiding incidents to resolution and contributing to root cause analysis
• Investigate potential malware and suspicious activity
• Tune alerting to reduce fatigue and improve prioritisation
• Act as SME in core security domains (e.g. network monitoring, Microsoft security tooling, bot protection)
• Threat hunt proactively across ASOS technology estate to identify weaknesses and emerging risks
• Contribute to security processes, documentation and standard operating procedures
• Support incident escalation and participate in major incident management when required
• Coach and support less-experienced colleagues and promote a strong security culture
• Stay informed on real-world threats and suggest improved detection techniques
• Participate in on-call rota (approx. one week every five)

Key requirements

• Experience in a Security Operations or Incident Response environment
• Ability to guide others in security or technical settings
• Working knowledge of detection engineering, IOCs, and alert tuning
• Experience using Microsoft security tools to investigate threats and document findings
• Interest in improving processes based on past incidents and investigations
• Experience or interest in building automation or playbooks to improve SOC efficiency
• Commitment to continuous learning and professional development

• Collaborative mindset
• Problem-solving ability
• Willingness to coach and share knowledge
• Detection engineering and IOC knowledge
• Alert tuning and monitoring
• Microsoft security tooling

…