Security Operations Lead

The role

The Security Operations Lead will run security operations including detection and response, vulnerability management, and penetration testing. You will also act as the assurance owner for platform security controls and support the Chief Information Risk Officer on security incidents.

What you will do

• Running detection and response
• Owning the SIEM and detection stack
• Managing alert triage and noise
• Selecting and managing the 24/7 MDR service
• Owning the vulnerability programme end to end
• Scoping and coordinating penetration testing
• Assuring Engineering-owned platform controls
• Making Beam incident-ready
• Leading AI threat modelling and adversarial testing
• Running third-party security assessment of sub-processors and suppliers

Required qualifications

• Built or run detection and response in a cloud-native environment
• Written and tuned detection rules
• Led incidents from first alert to post-incident review
• Experienced running a vulnerability management programme to SLA
• Comfortable in GCP and Kubernetes
• Familiar with what auditors need
• Evidenced controls under ISO 27001, SOC 2 or NIST 800-53
• Able to influence without authority

Nice to have

• Literate enough in application security to review an SDLC gate or a code-level finding

Benefits

• equity
• amazing benefits (see our careers page)

Before you apply

• 4-stage and an optional 5th interview process

About the company

Beam builds AI tools for frontline public services in the UK, US, Australia and the EU. The company is a global team of problem solvers building AI that serves society.