Salary: £63,000 – 103,000 per year
Requirements:
- Background in IT, SOC operations, or other hands-on technical work
- Solid grasp of cloud infrastructure, ideally AWS
- Strong networking knowledge: can read a PCAP, spot beaconing in flow logs, and reason about lateral movement across VLANs and firewalls
- Knowledge of attacker tradecraft, including initial access, persistence, privilege escalation, and exfiltration, and the ability to map an investigation to it
- Comfortable scripting in Python or similar to automate enrichment, triage, and response
- Strong ownership mindset: sees things through end-to-end with little guidance
- Deep familiarity with an EDR platform such as CrowdStrike, SentinelOne, or Defender as an investigation tool
- Detection-as-code experience, including Sigma, detection rules in Git, and CI-tested detections
- SOAR or custom automation experience for response workflows
- Experience defending data centre or colocation environments, including OOB networks, BMC/IPMI, and physical access telemetry
- Experience handling security audits such as ISO27001 or SOC2
- Familiarity with FortiGate logging and NetFlow/sFlow analysis
- DFIR certifications such as GCIH, GCFA, or GCIA are useful but not required
- Experience in energy, fintech, trading, or another high-value-target environment
Responsibilities:
- Act as an escalation point for IT in areas such as IAM, security, and automation
- Act as our security AI champion, building tools to make everyones jobs easier
- Own security monitoring end to end: build and tune log pipelines from AWS, endpoints, identity providers, SaaS audit logs, and network infrastructure into a coherent detection stack
- Write, test, and maintain detection rules that reduce noise and measure coverage against real attacker behaviour
- Lead incident response from detection through containment, eradication, and post-mortem; own the IR runbooks and keep them tested through tabletop exercises
- Perform forensic analysis on compromised endpoints, cloud workloads, and accounts, preserving evidence properly when it matters
- Work with IT to develop and improve security and IT policies and documentation
- Act as the point of contact for the business on external audits and assessments
- Track threat intelligence relevant to energy, trading, and GPU infrastructure and turn it into detections and hunts
- Run vulnerability management from a threat-led angle: prioritise by exploitability and exposure, and drive remediation through the IT and engineering teams who own the fixes
- Monitor the security of our data centre environments and flag anything that breaks the segmentation model
- Feed findings back into prevention by working with IT and engineering to close root causes
Technologies:
- AI
- AWS
- Cloud
- FortiGate
- Flow
- Git
- IAM
- Network
- Python
- Security
- Firewall
More:
We are Fuse Energy, a forward-thinking renewable energy startup on a mission to deliver a terawatt of renewable energy fast. We are building a fully integrated energy company, from developing energy generation projects to real-time power trading and distributed energy installations, and by selling directly to consumers we aim to cut out the middleman, lower costs, and pass on savings to customers. We raised $170M from top-tier investors including Multicoin, Balderton, Lakestar, Accel, Creandum, Lowercarbon, Ribbit, Box Group, and strategic angels. This is a full-time role based within the team that owns security across our IT and cloud environment, spanning AWS infrastructure, identity providers, endpoints, SaaS applications, and our data centre environments. Benefits include a biannual bonus scheme, fully expensed tech to match our needs, paid annual leave, and breakfast and dinner allowance for office-based employees.
- biannual bonus scheme
- fully expensed tech to match our needs
- paid annual leave
- breakfast and dinner allowance for office-based employees
last updated 36 week of 2026
#J-18808-Ljbffr…