Information Security Analyst – SecOps Detection

Overview

In this role you defend Starling’s customers and assets by building and tuning high-fidelity detection rules and analytics. You will proactively hunt for threats across cloud, SaaS, and endpoints, and support incident response with deep technical analysis. You’ll collaborate with adversarial simulation and threat intelligence teams to improve detection and response. This is a hands-on, cross-functional security engineering position at a fast-growing fintech that values ownership and collaboration.

Pay / Benefits

• 25 days holiday + public holiday allowance
• Birthday leave
• Buy/sell up to 5 extra days
• Volunteer time (16 hours/year)
• Pension scheme with salary sacrifice
• Life insurance 4x salary + income protection

Responsibilities

• Design, build, test, and maintain detection rules and analytics in SIEM and security platforms
• Proactive threat hunting across cloud, SaaS, and endpoint environments
• Collaborate in Purple Team exercises to validate and improve detections
• Provide incident response SME support during security incidents
• Integrate threat intelligence to guide detection strategies and hunting projects
• Collaborate with Security Operations and stakeholders to uplift security posture
• Maintain clear documentation for detection rules, hunting playbooks, and processes

Key requirements

• 3+ years in a technical security role (detection engineering, threat hunting, incident response, or threat intelligence)
• Strong understanding of attacker behavior and MITRE ATT&CK framework
• Hands-on SIEM experience (e.g., Splunk, Google SecOps, Elastic, Sentinel)
• Experience with proactive threat hunting and hypothesis-driven methodologies
• Cloud security knowledge for AWS, GCP, Azure
• Experience with EDR tools (Crowdstrike, SentinelOne, Cortex XDR)
• Solid OS knowledge (macOS, Linux, Windows) and core network security principles
• Excellent analytical, problem-solving, and communication skills
• Self-starter and collaborative with ability to lead projects
• Growth mindset and willingness to learn new challenges

• analytical thinking
• communication
• collaboration
• SIEM/analytics
• Threat hunting methodologies
• MITRE ATT&CK

…