Hybrid opportunity at
ZopaSecurity Operations Analyst
Zopa Bank, established as the first peer-to-peer lender in 2005 before launching as a bank in 2020, seeks a Security Operations Analyst to join its team…
Career Tools
About This Role
Zopa Bank, established as the first peer-to-peer lender in 2005 before launching as a bank in 2020, seeks a Security Operations Analyst to join its team in London. The Security Operations team protects the banking systems, services, and customers by investigating threats, responding to incidents, and managing security tools and services. Unlike traditional setups, this group oversees tools like Splunk, SentinelOne, Netskope, and AWS security services, offering opportunities in vulnerability…
Job Description
Zopa Bank, established as the first peer-to-peer lender in 2005 before launching as a bank in 2020, seeks a Security Operations Analyst to join its team in London. The Security Operations team protects the banking systems, services, and customers by investigating threats, responding to incidents, and managing security tools and services. Unlike traditional setups, this group oversees tools like Splunk, SentinelOne, Netskope, and AWS security services, offering opportunities in vulnerability management and cloud security.
This hybrid role requires working from the London office two to three days a week. The employer supports flexible working arrangements, including working from abroad for up to 120 days a year, provided the employee holds the right to work in that country. The position suits professionals with background experience in a technical environment such as IT support, cloud operations, infrastructure, or network security who want to expand their skills alongside experienced analysts and engineering teams.
Responsibilities
- Review, triage, and investigate security alerts, events, and incident tickets
- Analyze security logs to spot suspicious behavior, gauge potential impact, and decide on next steps
- Investigate common threats including malware, phishing, and account compromise
- Execute established incident response playbooks, escalate problems, and request assistance when necessary
- Keep accurate documentation of investigations, ticket updates, and incidents
- Operate within defined resolution and response expectations for security tickets
- Partner with IT Services, Identity and Access Management, engineering, fraud, and customer service teams
- Utilize security technologies such as Splunk, SentinelOne, Netskope, and AWS security services
- Take part in peer reviews and incident retrospectives to share lessons learned
- Contribute to security process improvements and build knowledge in cloud security and vulnerability management
Requirements
- Practical background in security operations or a relevant technical environment like IT support, infrastructure, network, or cloud operations
- Understanding of cyber security fundamentals including threats, vulnerabilities, risks, phishing, malware, and account compromise
- Experience reviewing security alerts or examining logs for unusual activity
- Knowledge of the incident response lifecycle with the ability to follow documented procedures
- Foundational understanding of core networking concepts along with Windows, macOS, and Linux
- Basic knowledge of cloud concepts and AWS services such as CloudTrail, S3, and IAM
- Analytical approach to investigations by gathering evidence and assessing potential impact
- Strong communication skills for documenting findings, explaining details, and escalating issues
- Ability to prioritize security tickets, manage time effectively, and meet agreed service levels
Qualifications
- Experience using SIEM, EDR, or security tools like Splunk, SentinelOne, Netskope, Mimecast, Tenable, or AWS GuardDuty
- Basic scripting ability using Python, PowerShell, or Bash
- Practical experience with vulnerability management or phishing investigations
- Familiarity with the MITRE ATT&CK framework
- Experience using Git or version control with engineering teams
- Background working in financial services, fintech, or another regulated environment
- Awareness of UK GDPR and FCA requirements
- Security certifications such as CEH, CySA+, CompTIA Security+, or a relevant degree
- Experience safely utilizing AI tools to support everyday tasks
Core Skills
Benefits
- Option of working from abroad for up to 120 days a year, subject to right to work requirements
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Where is this job located?
This role is based in London with a hybrid working arrangement requiring employees to visit the London office two to three days a week.
Can I work from abroad in this position?
Yes, employees have the option of working from abroad for up to 120 days a year, subject to having the right to work in the chosen country.
What salary does Zopa offer for this role?
The salary is not stated in the job posting.
What technical background is required?
Applicants need practical experience in security operations or a relevant technical environment like IT support, infrastructure, network, or cloud operations, along with foundational knowledge of cyber security, operating systems, networking, and basic cloud concepts.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.