Job description
A little about the team who you will be working with
PrimaryBid is an ambitious company with a fast release cycle that has scalability not only from a user point of view but also from a developer perspective. Our engineers work in small teams and are given freedom and autonomy when it comes to the code that they write. If you like solving security problems in similar environments, then this is the place to be!
A little about the role
Our team sits at the intersection of finance and technology. Working cross-functionally, you'll be helping to protect our platform and products that bring communities and companies together.
You will be responsible for Security Operations, working closely with product leads, software engineers and platform engineers to ensure that everyone is 'incident ready'. You will report directly into the CISO, to build and run the Security Operations team.
Key Responsibilities
- Lead a distributed team of application security experts and security engineers.
- Fully own the roadmap, ways of working, techniques, tools and processes of the Security Operations team.
- Ensure we can respond effectively and efficiently to cyber threats & incidents.
- Directing workflows and duties such as threat hunting and intelligence gathering; mentoring and developing SecOps staff to actively hunt and respond to advanced adversaries, such as criminals and hacktivists.
- Engage with the wider business to understand the risks and threats and use this to inform requirements for the Security Operations Centre (SOC);
- Conduct internal cyber and DLP (Data Loss Prevention) investigations;
- Manage and investigate cyber-related forensic activities.
- Develop security incident response plans & procedures including Security Incident Crisis / Emergency Management.
- Bring automation principles as the default way to go in all operational activities across the domain, and influence beyond.
- Build relevant KPIs & dashboards for regular review with the CISO.
- Possess strong communication and business skills to communicate with senior problem resolution stakeholders.
You will be successful in the role if
- Significant experience of building and leading operational security teams.
- Ability to lead a distributed team in an agile, product-led organisation.
- A good understanding of security topics in AWS, GCP, serverless, container platforms and Infrastructure as a Code environments.
- In-depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk management, incident management etc.
- Knowledge of tactics & techniques used by threat actors e.g. MITRE ATT&CK framework.
- Knowledge of various IT services, components and technologies including but not limited to Windows, Firewalls, Endpoint security provisions, IDS/IPS, email principles and security enhancements, Web Proxy, SIEM etc.
- Ability to handle high pressure situations with key stakeholders.
- Experience of leading technical security issues to resolution, incident response coordination.
- Ability to interpret system / device logs and events, identify patterns of behaviour and indicators of compromise (IOC's).
- Strategic vision to provide leadership and direction to develop best in class Security Operations capability.
- Experience Designing and building SOCs and implementing SOC functions in line with either ITIL or eTOM.
- Being a subject matter expert on threat hunting, incident response, intrusion detection, and threat intelligence to develop automated detection and response capabilities.
- Have a proven experience and understanding of how to work with and quickly build positive cross functional relationships.
- Self-starter able to work with minimal supervision and dedicated to delivering results.
- Have experience working with capital markets and financial operations.
- Have awareness of 1LOD to 3LOD operations and what they are needed for within financial operations.
- Have experience in scale ups
- You are confident and comfortable in building and managing multi-channel campaigns
- You put data at the heart of everything you do
- You embrace a feedback-driven culture to continuously improve
Don't have an up to date CV? That's cool with us, send over what you've got and we can get the conversation rolling.
A day in the life at PrimaryBid
At PrimaryBid we're tackling complex problems and redefining existing paradigms. This makes every day exciting! To solve a big problem, you need a lot of ambition and an empowered team. I spend a big part of my day enabling the team to do its best work, whether that's by setting clear OKRs, running cross-functional workshops, or digging through user research data. I update and prioritise the roadmap based on new insights and get buy-in from stakeholders. We've built a culture of learning. This means that we are constantly trying new things. For example, we've just started rebuilding our mobile app in Flutter, which was only released a few years ago. If something doesn't work out, we retro, adapt and move forward.
We are innovators, game-changers and pioneers. So, if you want to push boundaries and change the world, PrimaryBid is the place to be and you're the kind of person who's going to succeed here. Come and join our team!
Interview Process
First Interview
This will be a screening interview with a member of the technology team. The objective of this interview to get to know you a little, give you an opportunity to tell you more about the role and also to understand what you know about us
Second Interview
If all goes well, we will invite you for the second interview which will be an interview with cross-functional members of PrimaryBid, potentially including some members from our product and technology team. We will dig deeper into your experience and perhaps get a little technical too. Again, this interview is a two way street, where you are assessing us from a business and culture perspective. Please do come prepared with lots of questions, we are more than happy to answer them.
Final interview
The final interview will be a values based interview to understand your values a bit more in detail and see how they align with the PrimaryBid values which we have built over the years. The last step of the process for you to assess if we are the right fit for you and your aspirations! This interview will take place with a member of the executive team.
Depending on timing and urgency of the role, stages may get merged together.
We, PrimaryBid, celebrate diversity and are dedicated to creating an inclusive environment for all employees. We are committed to equality of opportunity for all staff and applications from individuals are encouraged regardless of age, disability, sex, gender reassignment, sexual orientation, pregnancy and marital status, race or religion. We adhere to these principles in all aspects of employment, including recruitment, hiring, advancement, training, discipline or discharge. PrimaryBid will not tolerate discrimination or harassment based on any of these characteristics."