Security Officer Triage - SecOps

Security Officer Triage - Sec Ops

Duration: 6-12 Months

Location: Reading

Role Description

The Security Triage Officer is a key member of the Tooling and Cryptography team, responsible for assessing and triaging incoming project requests, determining their impact on security operations, and planning their technical onboarding to security tooling. This individual will act as a bridge between project stakeholders, the Security Operations Centre (SOC), and the wider security engineering team to ensure seamless integration and operational readiness.

Key Responsibilities:

In addition to their triage responsibilities, the Security Triage Officer will contribute to day-to-day engineering activities, providing hands-on support and expertise in tools such as Splunk and Rapid7.

Project Request Assessment

Review and evaluate incoming project requests.

Perform impact assessments for technical onboarding to security operations tooling.

Liaison with Internal SOC Teams

Collaborate with SOC teams (e.g., Incident Management, Threat Intelligence, Vulnerability Management) to validate project impact.

Gather feedback and input to support accurate assessments.

Onboarding and Handover

Plan and coordinate onboarding activities for security tools.

Work with engineering and operational teams to ensure smooth handover.

Engineering Support

Act as an engineer in day-to-day operations, supporting and maintaining security tooling.

Provide expertise in tools such as Splunk and Rapid7, including deployment, configuration, and troubleshooting.

Collaboration and Documentation

Partner with internal stakeholders to ensure clear communication and understanding of requirements.

Maintain detailed documentation for all assessments, plans, and technical procedures.

Key Skills

Technical Expertise: Strong hands-on experience with tooling such asSplunk, Rapid7, Cisco Kenna, Microsoft Defender.

Project Management: Ability to assess project impact and plan onboarding activities.

Collaboration: Proven experience working with cross-functional teams, particularly within SOC environments.

Problem Solving: Strong analytical skills and the ability to troubleshoot complex technical issues.

Communication: Excellent verbal and written communication skills, including technical documentation.

Hands on experience security tools and platforms such as Microsoft Security suite and cloud security tools

Certifications such as Splunk Certified Architect, Rapid7 InsightVM Certified Specialist, or similar.

Familiarity with security frameworks and best practices (e.g., NIST, ISO 27001).

JTRA1_UKTJ