SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Anduril Industries is seeking a Security Operations Analyst to join the Detection and Response team in London. This role serves as a critical watchtower for Anduril's defense technologies, monitoring and responding to adversarial activity targeting the company's AI-powered military systems.
Key responsibilities include triaging and responding to security alerts across phishing, endpoints, cloud infrastructure, and SaaS applications. You will build and optimize detection signatures and response playbooks using detection-as-code principles, leading feedback loops to reduce false positives. The role involves threat modeling with cross-functional partners, conducting threat hunting and data baseline analysis to identify anomalous patterns, and participating in on-call incident response rotations.
As a Senior SecOps Analyst, you may serve as incident commander during major security events and will mentor junior analysts while guiding the detection and response maturity across the organization.
Required qualifications include hands-on experience in security monitoring, log analysis, and detection engineering across large datasets (endpoint, network, and application logs). You must have Python development experience contributing to shared SOC automation codebases, proficiency with SIEM languages (SPL, KQL, SQL), and experience in data lake environments. Broad practical security knowledge across endpoint, network, identity, application, and cloud infrastructure is essential, along with understanding of attacker tactics and techniques (TTPs) across Windows, Linux, macOS, AWS, and Azure. Strong communication and stakeholder collaboration skills are required. Candidates must be able to obtain and hold UK Security Clearance.
Preferred qualifications include incident response experience in cloud environments (AWS, Azure, GCP) and digital forensics or reverse engineering expertise.
