Security Specialist (SOC & IR) at ASOS

London, England, United Kingdom -

Full Time

Start Date

Immediate

Expiry Date

22 Jul, 26

Salary

0.0

Posted On

23 Apr, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Security operations, Incident response, Endpoint monitoring, Triage, Root cause analysis, Malware investigation, Alert tuning, Network monitoring, Microsoft security tooling, Bot protection, Threat hunting, Detection engineering, Indicators of compromise, Automation, Playbook development, Incident management

Industry

Retail Apparel and Fashion

Description

Company Description We’re ASOS, the online retailer for fashion lovers all around the world. We exist to give our customers the confidence to be whoever they want to be, and that goes for our people too. At ASOS, you’re free to be your true self without judgement, and channel your creativity into a platform used by millions. But how are we showing up? We’re proud members of Inclusive Companies, are Disability Confident Committed and have signed the Business in the Community Race at Work Charter and we placed 8th in the Inclusive Top 50 Companies Employer list. Everyone needs some help showing up as their best self. Let our Talent team know if you need any adjustments throughout the process in whatever way works best for you. Job Description ASOS is recruiting for a Security Operations and Incident Response Specialist to join our Security Operations team, reporting into the SOC & IR Manager. This role plays a key part in helping to protect ASOS from cyber threats, while continuously improving the organisation’s overall security posture. This is a skilled and hands-on role which would suit someone who enjoys problem‑solving, collaboration and continuous learning What you’ll be doing Monitoring endpoints and triaging security alerts, supporting incidents through to resolution and contributing to root cause analysis Investigating potential malware and suspicious activity Helping to reduce alert fatigue through tuning, prioritisation and process improvement Acting as a subject matter expert in at least one core security domain (e.g. network monitoring, Microsoft security tooling, bot protection) Proactively threat hunting across ASOS’ technology estate to identify weaknesses, emerging risks and active threats Contributing to security processes, documentation and standard operating procedures Supporting incident escalation and participating in major incident management when required Coaching and supporting less‑experienced colleagues, sharing knowledge across security and non‑security teams, and helping to build a strong security culture Staying informed about real‑world cyber security threats and contributing ideas for new or improved detection techniques Participating in an on‑call rota as part of the Security Operations team (currently one week in every five) Qualifications About you We’re looking for someone who brings relevant experience and a collaborative mindset. Experience working in a Security Operations or Incident Response environment Comfortable supporting and guiding others in a security or technical setting Working knowledge of detection engineering, including indicators of compromise (IOCs) and alert tuning Experience using Microsoft security tools to investigate potential threats and document findings An interest in improving processes based on previous incidents and investigations Experience (or interest) in building automation or playbooks to improve SOC efficiency A commitment to continuous learning, professional development, and supporting the growth of others Additional Information BeneFITS’ Employee discount (hello ASOS discount!) ASOS Develops (personal development opportunities across the business) Employee sample sales Access to a huge range of LinkedIn learning materials 25 days paid annual leave + an extra celebration day for a special moment Discretionary bonus scheme Private medical care scheme

Responsibilities

The Security Specialist will monitor endpoints, triage security alerts, and support incident resolution while contributing to root cause analysis. They will also proactively hunt for threats, tune security tools to reduce alert fatigue, and coach less-experienced team members.