Senior Security Operations Analyst

About Lendable

Lendable is on a mission to build the world's best technology to help people get credit and save money.

• We're building one of the world’s leading fintech companies and are off to a strong start:
• One of the UK’s most exciting unicorns with a team of over 800 people

Among the

fastest-growing tech

companies in the UK

Profitable since

2017

Backed by top investors including

Balderton Capital

and

Goldman Sachs

Loved by customers

with the best reviews in the market (4.9 across 10,000s of reviews on

Trustpilot

• )
• So far, we’ve rebuilt the Big Three consumer finance products from scratch:

loans, credit cards and car finance

• . We get money into our customers’ hands in minutes instead of days.
• We’re growing fast, and there’s a lot more to do: we’re going after the two biggest Western markets (UK and US) where trillions worth of financial products are held by big banks with dated systems and painful processes.

Join us if you want to

Take ownership

you are trusted to make decisions that drive a material impact on the direction and success of Lendable from day 1

Work in small teams of exceptional people

Lendies are relentlessly resourceful. We challenge the status quo to solve problems and find smarter solutions

Build the best technology in-house

: we use new data sources, machine learning and AI to make machines do the heavy lifting

About the Role

• Lendable is a high-growth FinTech building its security operations capability deliberately. As a Senior Security Operations Analyst, you will triage and respond to security alerts, help improve the quality of the detections behind them, and lead the response when a security event becomes an incident.
• You will investigate alerts and escalations from our MSSP, tune our monitoring so that it finds more of what matters and less of what doesn’t, and act as a trusted Incident Commander for security incidents, from declaration through to post-incident review. You will work with Engineering, IT, Legal, Risk and senior stakeholders, and you will be credible with all of them.
• AI is used widely across the business, in how we build software, run operations and serve customers, and that changes both what security incidents look like and how quickly we can respond to them. You will use AI and automation as a normal part of your work, and you will be able to investigate and respond to incidents where AI tooling is the cause, the target or the route in.
• This is a senior individual contributor role for someone with hands-on SOC experience and a track record of commanding incidents.

What You’ll Be Doing

• Alert Triage & Monitoring
• Triage and investigate alerts across our SIEM, EDR, identity and cloud tooling, taking escalations from our MSSP’s first-line team.
• Reduce false positives and alert fatigue by tuning detection rules, thresholds and suppressions.
• Utilise AI and automation to speed up triage, enrichment and response, and to remove repetitive manual work from the analyst workflow.
• Incident Command & Response
• Command security incidents, coordinating technical response, decision-making and communications across Engineering, IT, Legal, Risk and senior stakeholders. Give clear, timely updates to executives during live incidents.
• Lead or support technical investigation and containment across endpoint, identity and cloud (AWS/GCP) environments, including incidents involving AI use, such as prompt injection, or credentials exposed through AI-generated code.
• Run blameless post-incident reviews, track actions to closure, and feed lessons back into detection, playbooks and controls.
• Take part in the out-of-hours on-call rota.
• Operational Reporting & Assurance
• Track and report SecOps metrics that reflect reality, such as alert quality, time to triage, time to contain, incident volumes and root causes.
• Maintain accurate incident records and evidence in our incident management platform to support audit and assurance activity.
• Build working relationships with Engineering, Platform and IT Systems so that incident response is practised before it is needed.

What We’re Looking For

Proven incident command

Demonstrable experience leading significant security incidents as Incident Commander or lead responder, from declaration to resolution and review. You can describe incidents you have run, the decisions you made and what you changed afterwards.

Technical investigation skills

Solid hands-on SOC/DFIR experience, including log analysis, endpoint and identity investigation, and cloud incident response in AWS or GCP.

AI fluency

You understand how AI use creates security risk, including data exposure, agent misuse and AI-assisted attacks, and you can investigate and contain incidents that involve it.

AI-first ways of working

You already use AI and automation to speed up your own work, whether in investigation, enrichment, detection engineering or reporting, and you can judge when to trust the output and when to check it.

Composure and influence

You stay calm and structured under pressure, and can direct engineers and senior stakeholders without formal authority over them.

Communication

You can brief a senior leader in plain language during a live incident, and write a post-incident report that an engineer, an auditor and a board member can each use.

Pragmatism

You understand that security supports a business moving quickly, and you balance risk, speed and proportionality in your decisions.

Regulated environment awareness (desirable)

Experience in financial services or another regulated sector, including incident reporting and evidence expectations.

Certifications (desirable, not required)

GCIH, GCFA, GCIA, or equivalent practical experience.

Interview process

• A quick phone call with one of the talent team
• A Hiring Manager call with our Head of InfoSec

Technical Interview with two of the team

Final stage interview with our VP of Engineering

Life at Lendable

Winning team

the opportunity to scale up one of the world’s most successful fintech companies

Flexible working

flexible approach tailored to each role. Hybrid roles require three days in-office weekly; fully remote roles include regular opportunities for in-person connection through socials and off-sites

Socials & connection

opportunities and events to come together, socialise, and get to know each other beyond the office walls

Health coverage

support for your physical and mental wellbeing, including private health cover

Retirement & savings

long-term financial wellbeing through retirement savings plans

Employee referral programme

earn a competitive bonus when you refer successful new team members

Office meals & snacks

enjoy a fully stocked kitchen, plus complimentary lunches prepared by in-house chefs on in-office days at select locations

Sustainable commuting

cycle-to-work and electric vehicle salary sacrifice schemes available in select locations

Please note

The availability and details of specific benefits vary by location and role. For more information, please speak to your Talent Partner.

Check out our

blog

!