Security Operations Specialist

What you'll do:

As a Security Operations Specialist, you’ll be at the frontline of day-to-day cyber operations, ensuring the organisation is proactively monitoring and responding to evolving threats. This is a hands-on role suited to someone with broad exposure across security operations, ideally gained in a fast-paced environment where you’ve had to wear many hats - such as an MSP, SME, or within a lean internal security team.

Key responsibilities include monitoring cyber threat intel feeds, running phishing simulations, conducting internal vulnerability scans, assisting in incident response, and contributing to the design and uplift of security controls. You’ll also play a part in reporting, trend analysis, and communicating risks and actions clearly to a range of stakeholders.

• Monitor and analyse cyber threat intelligence feeds for emerging risks.
• Plan, run, and report on phishing simulation campaigns and user awareness activities.
• Conduct vulnerability scans and coordinate with internal stakeholders for remediation.
• Support incident response and operational security activities.
• Contribute to the uplift and implementation of security controls and standards.
• Stay current on cyber threat trends, tools, and attacker techniques.
• Communicate technical risks and findings clearly to both technical and non-technical audiences.

What you bring:

We’re looking for someone with hands-on experience - either coming from a cyber operations role where you’ve done a bit of everything, or from a strong infrastructure background (network/systems) where you’ve since developed solid cyber capabilities.

• 3+ years in cyber security or adjacent fields (e.g., systems/network engineering).
• Experience in cybersecurity operations, ideally in an MSP, SME, or lean team environment.
• Familiarity with cyber threat intelligence feeds and how to apply them practically.
• Proficiency in vulnerability scanning tools (e.g., Tenable, Qualys) and remediation workflows.
• Exposure to phishing simulation platforms and user awareness programs.
• Solid understanding of IT infrastructure: applications, networks, servers, and endpoints.
• Strong communication skills - written and verbal - across all levels.
• Industry certifications (e.g., CISSP, CEH, Security+, CISM) are a bonus, not a requirement.