24 hours ago
London, United KingdomSenior
Responsibilities
- Own and operate alerting and monitoring capabilities during a transition period.
- Maintain and improve Microsoft Sentinel through detection-rule authoring and tuning, data-connector management, and alert-noise reduction.
- Operate and optimize Defender XDR and Defender for Cloud, including policy management and posture recommendations.
- Maintain and extend automated security checks in delivery pipelines.
- Coordinate vulnerability remediation with engineering squads and reduce time to fix.
- Support data-loss-prevention controls and safeguards for AI workloads and their data exposure.
- Investigate suspicious activity, support incident response, and perform containment, evidence gathering, and post-incident reviews.
- Contribute to detection-as-code and infrastructure-as-code for security tooling.
- Coordinate penetration-testing engagements, findings reviews, and remediation prioritization.
Requirements
- Hands-on SIEM experience, ideally with Microsoft Sentinel; Splunk, Chronicle, or QRadar experience is also considered.
- Practical Azure security experience covering Defender for Cloud, Entra ID, Azure networking, and cloud security posture management.
- Experience with Terraform or Bicep infrastructure-as-code in a security engineering context.
- Experience driving vulnerability remediation with engineering teams.
- Familiarity with data-loss-prevention controls and AI security considerations.
- Ability to contribute to threat modeling and communicate security risk to engineering and product audiences.
- SC-200 Microsoft Security Operations Analyst certification.
- Proficiency in KQL for detection-rule authoring and threat hunting.
- Experience in a fintech or financial services environment is preferred or relevant.
Benefits
- Contract role with immediate impact and independent execution.
- Work in a small, collaborative security engineering team with visible ownership and broad scope.
About Flagstone
Flagstone operates a UK cash-deposit platform that lets individuals, businesses, advisers, and charities open and manage savings across multiple banks through one account, including Instant Access, Fixed Term, and ISA products. It earns revenue by facilitating deposits and partnerships with banks and via adviser and API distribution. Founded in 2013 and headquartered in London, the platform connects clients to 65+ banks and has 75,000+ customers with around £19bn held.