Senior Security Operations Analyst
Employer: Bullish
Location: United Kingdom
Classification: Information Technology
Contract Type: Skilled Worker (Visa Sponsorship Available)
Overview
The Bullish Group has built an ecosystem focused on developing financial services for the digital assets sector through technology and investment businesses.
These include:
- Bullish Exchange – digital asset trading services with central limit order matching and proprietary market-making technology, delivering deep liquidity and tight spreads. Licensed by the Hong Kong Securities and Futures Commission, German Federal Financial Supervisory Authority, and the Gibraltar Financial Services Commission. Since launch in November 2021, Bullish Exchange has surpassed US$1.3 trillion in trading volume, with 2H 2024 average daily volume exceeding US$2 billion.
- Bullish Capital – an investment company providing strategic capital, industry expertise, and an extensive network to support initiatives connecting traditional finance with digital economy opportunities.
- CoinDesk – award-winning media, events, indices, and data business servicing the global crypto economy.
Reports to
Information Security Manager, Security Operations & Incident Response
Role & Responsibilities
- Support daily SOC operations to meet Service Level Objectives.
- Monitor and analyse security alerts and incidents using SIEM tools.
- Create detection use cases, perform proactive threat hunting, and research emerging threats.
- Respond to security incidents, perform initial analysis, and escalate as needed.
- Participate in incident response planning and execution.
- Document incidents, recommend improvements, and maintain SOPs.
- Prepare detailed incident and trend reports for stakeholders.
- Collaborate with technical teams to ensure system and data security.
- Participate in the on-call rotation for after-hours incident response.
Experience & Qualifications
- Hands-on experience with Linux OS (system administration, security hardening, incident response).
- Professional certifications (CISSP, CISM, GCIA, GCIH, GCFE, GCFA, GREM, Splunk Power User, etc.) preferred.
- Proven experience in Security Operations and Incident Response.
- Experience with SIEM (Splunk, Google Chronicle).
- Familiarity with MITRE ATT&CK and proactive/reactive threat hunting.
- Knowledge of IDS/IPS, WAF, EDR, and related tools.
- Strong understanding of networking, operating systems, and cybersecurity.
- BS/BA in Cyber Security/Computer Science, or equivalent work experience.
- Forensic tools and malware analysis experience is a plus.
- Cloud experience (AWS, GCP, Azure) is a plus.
- Strong communication and presentation skills.
- Ability to work across different regions in a process-driven organisation.
Additional Information
❋ This position is open to candidates in the UK requiring visa sponsorship.
Bullish is proud to be an equal opportunity employer. We are fast evolving and striving towards being a globally diverse community. With integrity at our core, our success is driven by talented individuals and the perspectives they bring.
Application Process
Interested applicants should apply via the Bullish careers portal. Shortlisted candidates will be contacted for the next stage.
