Senior Security Operations Engineer

Job description

What will you do?

You will take strategic and operational ownership of maintaining and continuously improving our security operational procedures, processes, and technical controls. Operating with a high degree of autonomy, you will lead our efforts in threat detection, response, vulnerability management, and threat intelligence to actively mitigate operational information security risks across the Group.

You will act as a key leadership figure within the team, deputising for the Head of Function in their absence and driving cross-functional collaboration with internal teams and external partners.

Key Accountabilities:

Leadership & Incident Management

• Deputising & Autonomy: Work independently to manage day-to-day security operations, confidently stepping up to lead the function during the M2’s absence.
• Incident Ownership: Lead the investigation and resolution of Information Security Incidents (ISI) and broader security investigations.
• Major Incident Support: Drive and support the formal ISI process for major cyber incidents, ensuring rapid containment and remediation.
• SOC & Support Liaison: Champion effective communication and incident prioritisation between our Security Operations Centre (SOC) and internal TP support teams.

Vulnerability & Threat Management

• Programme Orchestration: Own the configuration, scheduling, and strategic direction of vulnerability scans within the TP vulnerability management programme.
• Remediation Governance: Drive and oversee the remediation of identified vulnerabilities in strict alignment with TP’s SLAs.
• Third-Party Pen Testing: Scope and organise external penetration tests with third-party providers, managing the subsequent remediation of findings on a risk-prioritised basis.
• Proactive Threat Hunting: Lead the proactive searching, identification, and resolution of Indicators of Compromise (IOCs) and Indicators of Behaviour (IOBs).

Infrastructure & Compliance

• Cloud & On-Prem Governance: Enforce and modernise secure configurations and policies for on-premise infrastructure and our increasingly vital multi-cloud platforms (AWS and GCP).
• System Optimisation: Continuously evaluate and optimise Information Security tools and systems.
• Audit & Performance Metrics: Own the delivery of SecOps KPI reporting and ensure all necessary evidence is structured and available for scheduled compliance audits.

Not sure you qualify?

We’re driving to become a truly inclusive employer, where everyone in our Group feels safe, welcome, and confident to be their authentic selves – "you be you, it makes us, us," as we say.

If you’re interested in this opportunity but your past experience doesn’t align perfectly, we encourage you to apply anyway. You might be just the right candidate for this or other roles with us.

You’ll be supported by fantastic training and development, with the opportunity to learn, grow, and progress your management career across the Travis Perkins Group.

We’ll also equip you with a benefits package that grows as you grow with the company:

• Competitive bonus
• Save-As-You-Earn scheme
• Buy-As-You-Earn scheme
• Contributory pension scheme
• Colleague discount across a variety of Group businesses

A bit about us

As the largest distributor of building materials in the UK, Travis Perkins has been helping to build Britain for over 200 years. With over 5 businesses, 16,000 colleagues, and more than 1,200 branches, stores, and sites around the UK, we believe we have the best people and the best place to work. Everyone works hard together to deliver results, but most importantly, we have some fun along the way!