Senior Threat & Response Specialist

Location: Crawley Court Winchester & Newman Street London

We operate a flexible hybrid working environment requirement to travel to either our Winchester or London office up to twice a week.

• Competitive salary
• 10% bonus
• Work Life Smarter our commitment to a flexible and hybrid working culture
• Generous pension scheme starting at 6% rising to 10%
• A unique wellbeing programme that looks after the whole you
• Access to multiple learning platforms to support your individual development
• Active and diverse networks that build community support wellbeing and advocate for change
• A comprehensive set of benefits including discounts on big brands gymflex memberships and paid volunteering leave - see our full list of benefits here.

The Role

The Senior Threat & Response Specialist is uniquely positioned to drive the evolution of our cyber security capability combining deep operational expertise with advanced cuttingedge technologies. Through this role the specialist plays a pivotal part in shaping an innovative intelligenceled security function one that anticipates threats automates responses and sets new standards of excellence across our organisation and the wider industry.

Candidates with a strong SIEM engineering background who want to broaden their scope into 3rdline SOC investigation and incident response will be particularly well suited to this opportunity. This position provides a unique opportunity to own and shape the role as we establish best practices and effective ways of working across our organisation.

Experience in Cloud Security especially across Azure AWS or hybrid environments will be highly advantageous enabling you to support Arqivas shift toward securebydesign cloud adoption.

You will work within Arqivas Information Security Operations Teams reporting to the Head of Threat and Response and collaborating closely with the broader Security organisation as well as technical teams across Arqiva. Together you will help deliver and mature our core Cyber Defence capabilities including SIEM and Monitoring Vulnerability Management Incident Response and Analysis and Threat Intelligence.

Key Responsibilities

• Lead the engineering optimisation and continuous improvement of Arqivas SIEM platform ensuring highquality detections effective log ingestion pipelines and strong operational performance.
• Design develop and tune advanced detection use cases aligned to evolving attacker behaviours leveraging threat intelligence and frameworks such as MITRE ATT&CK.
• Support the onboarding and normalisation of new data sources including cloud telemetry application logs and platform services ensuring full visibility across hybrid environments.
• Collaborate with DevOps and platform engineering teams to embed security controls monitoring and detection within CI/CD pipelines and infrastructureascode deployments.
• Utilise cloudnative and thirdparty tooling such as Wiz to assess cloud posture improve asset visibility enrich threat detection logic and drive proactive remediation.
• Act as an escalation point for complex 3rdline SOC investigations providing analytical support.
• Collaborate with suppliers customers and Arqiva stakeholders to deliver Threat & Response services drive improvement and enhance the effectiveness of Arqivas Security Capabilities.
• Provide technical analysis and interpretation of Arqivas internal and external landscape advising and supporting the Head of Threat & Response in embedding the incident response and cyber continuity elements of Arqivas information security strategy across the organisation.
• Mentor junior Threat & Response colleagues across any of the Threat & Response services.
• Coordinate with stakeholders of varying seniority and technical background as an authoritative representative of the Threat & Response function.

Key Attributes & Experience

• Technical background mindset and approach.
• Genuine enthusiasm for technology and Cyber Security.
• Adaptability and self-sufficiency.
• Inquisitive and analytical.
• Strong communication reporting and stakeholder management skills.
• Able to understand technical concepts and scenarios and translate in clear language for non-technical stakeholders and executives.
• Honest open and genuine in your interactions with others.
• Deep tooling-agnostic engineering architectural and operational expertise across all key Security platforms such as VM/SIEM/EDR and able to transfer knowledge between toolsets.
• Knowledge and experience of working within organisations the implement relevant Cyber frameworks and methodologies such as MITRE ATT&CK NIST ISF ISO27000.
• Relevant industry qualifications such as SANS GIAC CEH CCNA AZ-500.
• Extensive experience of performing technical threat analysis and incident response activities against several kinds of attack including malware data breach supply chain compromise and others.
• Experience in the management and handling of Security incidents including assessment categorisation and prioritisation and root cause analysis.
• Familiarity with common attack methodologies and methods used by Cyber threat actors during the threat lifecycle.
• Experience interpreting and actioning Threat Intelligence.
• Experience with both on-prem and AWS and Azure cloud environments and Security solutions.

Please note that the successful candidate will be required to successfully undergo UK Security Clearance and must have been resident within the UK for at least five years.

Why Arqiva:

We enable a switched-on world to flow. As the UKs leader in TV and radio broadcast and the countrys top smart utilities platform we are shaping the future of connectivity.

Our infrastructure delivers media and data exactly where theyre needed - whether thats bringing TV and radio to your home or sending smart meter data to your utility provider. Our technology works quietly behind the scenes connecting millions every day.

But its not just what we do its how we do it. At Arqiva youll find real connection: supportive teams active colleague networks and plenty of ways to get involved and feel part of our community. Well give you the space and support to grow - whether thats developing your skills trying something new or taking on fresh challenges. And because there is more to life than work our rewards and benefits are designed to support your wellbeing your lifestyle and what matters most to you.

Our commitment to Diversity & Inclusion

At Arqiva were committed to building a workplace where everyone feels valued heard and empowered to succeed. We welcome applications from all backgrounds and experiences and we work hard to remove barriers so every colleague can thrive. If you need any adjustments at any stage of the recruitment process please reach out to

If this sounds like the right next step for you wed love to hear from you!

#LI-KM1