---
title: 'Senior Security Operations Engineer at Risk Ledger'
canonical: 'https://feeny.ai/job/senior-security-operations-engineer-risk-ledger-london-f4tnbd03sz8b'
type: 'job'
last_seen: '2026-10-19'
---

# Senior Security Operations Engineer at Risk Ledger

- **Company:** Risk Ledger
- **Location:** London, United Kingdom
- **Compensation:** £90k–£100k
- **Posted:** 2026-08-04
- **Last confirmed live:** 2026-10-19
- **Apply:** https://job-boards.eu.greenhouse.io/riskledger/jobs/4941797101

## Job description

## About us

Risk Ledger is developing a network of connected organisations, all working together to defend against cybersecurity attacks in the supply chain.

Organisations rely on us to establish trust, through sharing their security maturity and visualising the risks posed by their supply chain ecosystem. And we’re already trusted by customers like British Airways, BAE Systems and the NHS.

We are putting together an amazing and talented team from a diverse set of backgrounds and skillsets to drive us towards our vision. Risk Ledger is built on the respect we have for one another and our users, united by our shared values and mission.

Every one of us is still learning: it’s how we grow as individuals. We’re curious. We’re ambitious. And we’re humble and honest. At Risk Ledger, we aim high to find the best solutions we can and always put our users first.

The team:

You’ll join the Director of Information Security supporting and collaborating with all parts of the business to deliver a secure environment enabling impactful outcomes for Risk Ledger and our customers.

This role:

As our Senior SecOps Engineer you’ll be playing a critical part in maintaining and evolving the security of our product, business tools, people, and organisation.

This is an opportunity to have a huge long-standing impact through improving our technical security strategy, which will lead to even greater success for our business and our customers.

In the short to medium term, your focus will be on improving operational security capability - enhancing detection and response, incident management, vulnerability management and cloud security operations. As these capabilities mature, you’ll increasingly focus on security engineering and architecture; designing scalable security services, improving our security platform and embedding secure-by-design principles across the organisation.

From day one, you'll shape opportunities to empower our team by maintaining and improving the security of our tools and working practices for peak performance, all while safeguarding the confidentiality of our customers' data. Success hinges on collaboration, as you forge strong, trusted relationships across teams.

In this role you will:

Manage, build and mature our Security Operations capability (short to medium term)

- Own and continuously improve security monitoring, detection and incident response capabilities across our cloud, endpoint and SaaS environment.
- Build, tune, and maintain high-quality detections, reducing alert fatigue while increasing confidence that meaningful threats are identified quickly.
- Continuously improve vulnerability management through effective scanning, risk-based prioritisation, remediation and tracking.
- Improve our cloud security posture across AWS and GCP through strong identity management, telemetry, network security, encryption and continuous posture assessment.
- Develop and automate operational processes, playbooks and workflows that improve consistency and allow the team to scale efficiently.
- Support audit and compliance activities by ensuring operational controls are implemented, measurable and operating effectively.

Evolve our Security Engineering capability (medium to long term)

- Design and engineer scalable security capabilities that improve visibility, detection, resilience and operational efficiency across the organisation.
- Architect and evolve our security telemetry and detection platform, transforming raw data into actionable security intelligence.
- Design security services, standards and reusable capabilities that can be adopted consistently across engineering teams.
- Lead technical security initiatives that improve the maturity of our security architecture and reduce long-term organisational risk.
- Partner closely with engineering teams to embed secure-by-design principles into systems and platforms.
- Evaluate emerging security technologies and identify opportunities to improve our overall security architecture through thoughtful adoption and automation.
- Help shape the long-term technical security roadmap alongside Engineering and Technology leadership.

Across both areas

- Help secure and govern the organisation's use of AI technologies, reviewing new tooling, assessing risk and contributing to practical security guardrails.
- Mentor colleagues, provide technical leadership and act as a trusted escalation point during security incidents.
- Manage a varied portfolio of operational work, strategic improvements and technical projects, balancing immediate priorities with long-term objectives.
- Contribute wherever needed in a growing scale-up environment, helping improve the resilience and security of our products and services.

You’ll have:

- 5+ years' experience in Security Operations, Security Engineering or Incident Response, ideally within a customer-focused SaaS organisation.
- Strong hands-on experience securing cloud environments (AWS and/or GCP).
- Deep experience with security monitoring, SIEM platforms, EDR, detection engineering, alert triage and incident response.
- Experience building or improving operational security capabilities rather than simply operating existing tooling.
- Experience with security tooling including SIEM, EDR, DLP, MDM and cloud security platforms.
- Experience automating security processes using scripting or software engineering skills (Python, Go, TypeScript/JavaScript, Bash or similar).
- Strong understanding of attacker techniques (MITRE ATT&CK) and how to translate them into effective detections.
- Experience with vulnerability management and security telemetry.
- Understanding of modern AI tooling, AI security risks and governance considerations.
- Good understanding of networking, distributed systems and cloud architectures.
- An interest in security architecture and building long-term security capabilities.

You might have:

- Experience designing security architecture for cloud-native platforms.
- Experience building or operating detection engineering programmes.
- Threat hunting or purple team experience.
- Experience with CNAPP, CSPM or exposure management platforms.
- Experience with eBPF or modern observability tooling.
- Experience implementing security automation using SOAR or similar orchestration platforms.
- Knowledge of policy-as-code and security governance.
- Familiarity with supply chain security and software integrity.
- Experience evaluating AI/LLM security, agentic systems or model governance.

You will be:

- An excellent communicator, able to produce clear incident reports, technical documentation and stakeholder updates.
- A pragmatic problem solver who balances operational needs with long-term improvements.
- Comfortable working through ambiguity and making sound technical decisions.
- Curious, with a desire to continually learn and improve both operational and engineering practices.
- Someone who enjoys building systems and capabilities that scale, rather than simply maintaining them.
- Collaborative and approachable, working as part of a team rather than in isolation.
- Able to balance short-term operational priorities with medium and long-term engineering and architectural outcomes.

The perks:

- 💰Competitive base salary
- 📈Generous EMI equity package
- 👌Private pension
- ✈️28 days annual leave + bank holidays
- 🏖Additional 30 days of unpaid leave per year to use as you wish
- 🎆Ad-hoc companywide time off over the festive period
- 🏥Private healthcare with AXA Insurance - including enhanced mental wellbeing coverage
- 🏠Hybrid working policy, typically 2-3 days in the office
- 👶Enhanced family (parental) leave - gender-neutral policy, 12 weeks paid leave
- 👪5 days Caretaker's leave
- 😷Enhanced occupational sick pay
- 💻£500 WFH budget
- 📚All the learning resources and books you want to aid in your personal development
- 🎉 Regular socials to unwind and have some fun

Salary range £90,000—£100,000 GBP

## About Risk Ledger

## Company Overview
- **One-liner**: Risk Ledger provides a third-party risk management platform that connects organizations into a secure network to visualize and mitigate supply chain security risks in real-time.
- **Entity Type**: Private (Series A)
- **Headquarters**: London, United Kingdom
- **Founded**: 2018
- **Founders**: Haydn Brooks (CEO), Daniel Saul (CTO)

## Core Business
- **Primary Industry**: Computer and Network Security / Third-Party Risk Management (TPRM)
- **Target Customers**: B2B – enterprises and organizations of all sizes that need to manage cybersecurity risk across their supply chain (security, procurement, and compliance teams)
- **Mission/Purpose**: To shift the way organizations approach cybersecurity and risk management by building a global network of connected organizations that can "Defend-as-One" against cyber attacks.

## Products & Services
- **Risk Ledger Platform**: A dynamic network-based SaaS platform that connects organizations with their suppliers. It replaces point-in-time questionnaires with a standardized, ever-green assessment. Suppliers complete a single profile that can be shared with multiple customers, drastically reducing administrative burden. The platform provides continuous risk signals, identifies concentration risks across 4th and 5th parties, and facilitates collective intelligence sharing.
- **Assessment Framework**: A standardized supplier security framework that is updated regularly against the latest cybersecurity directives and industry regulations, allowing for consistent benchmarking across the supply chain.
- **Reporting & Visualization**: Tools for mapping and visualizing the full supply chain, identifying chokepoints, and tracking risk mitigation progress.

## Market Standing
- **Funding**: Total of **$12.59M** raised over 5 rounds [crunchbase.com](https://www.crunchbase.com/organization/risk-ledger). Key rounds include:
    - Pre-Seed: $1.8M (July 2019, led by Firstminute Capital)
    - Seed: $2.9M (Oct 2021, led by Lifeline Ventures)
    - Series A: £6.25M (~$7.7M) (Nov 2023, led by Mercia Ventures)
- **Key Metric**: **$3M** estimated annual revenue [linkedin.com](https://uk.linkedin.com/company/risk-ledger).
- **Notable Investors & Partners**: Mercia Ventures, Lifeline Ventures, Firstminute Capital.
- **Growth Signals**: The platform now connects **over 16,000 organizations** [riskledger.com](https://riskledger.com/). Headcount has grown **30.4% year-over-year** to **81 employees**, with a presence in the UK, US, Japan, and Finland [linkedin.com](https://uk.linkedin.com/company/risk-ledger). They are actively hiring for a founding US Sales role, signaling a major push into the North American market.

## Competitive Advantages
- **Collective Network Model**: Unlike traditional "point-in-time" questionnaire-based solutions, Risk Ledger creates a living network. Once a supplier is on the platform, any company in their network can instantly view their security profile, creating a powerful "use many" model that drastically reduces friction for both buyers and suppliers.
- **Deeper Visibility**: The network model provides visibility beyond direct third-parties, uncovering risks at the 4th and 5th party level which are typically blind spots for other tools.
- **Real-time Risk Signals**: Instead of relying on static annual assessments, the platform continuously monitors for emerging threats and alerts users if a connected supplier is impacted, creating a proactive rather than reactive security posture.

## Strategic Focus
- **Scaling the Network**: The primary focus is on increasing the number of organizations on the platform to strengthen the network effect—the more organizations join, the more valuable the platform becomes for everyone.
- **US Market Expansion**: With the hiring of a **Founding U.S. Sales Team** member and 7% of the workforce already based there, entering and capturing the North American market is a key growth priority.
- **Product Development**: They are actively hiring for a **Staff Engineer** and **Senior Product Engineer**, indicating a strong focus on building out the platform’s capabilities.
- **Community Building**: With roles like a **Community & Field Marketing Lead**, there is a clear strategy to build a community of security professionals around the "Defend-as-One" ethos.

## Why Work Here
- **Culture & Values**: The company has a highly-rated culture (**4.9/5.0** on LinkedIn) based on transparency, creativity, curiosity, and making a meaningful impact [riskledger.com](https://riskledger.com/careers). They emphasize "Intentional Transparency" as a core value.
- **Work Environment**: **Hybrid/flexible** working based out of their London office, typically requiring **2-3 days in the office**.
- **Perks & Benefits** [riskledger.com](https://riskledger.com/careers):
    - 25 days annual leave + public holidays + "August rest leave" + "Festive rest leave" (company-wide winter break).
    - 30 days per year to work from abroad.
    - Private healthcare through AXA (including enhanced mental health coverage).
    - Gender-neutral family leave policy with 12 weeks paid leave.
    - 5 days paid "Caretakers leave."
    - £500 WFH budget and £500 annual training budget.
    - Regular socials and large company parties.
- **Growth Opportunity**: Joining a well-funded, fast-growing Series A startup (30% headcount growth YoY) where employees can make a significant impact and help shape the company’s trajectory.

## Sources
1. [Risk Ledger Website](https://riskledger.com/)
2. [Risk Ledger About Page](https://riskledger.com/about)
3. [Risk Ledger Careers Page](https://riskledger.com/careers)
4. [Crunchbase - Risk Ledger](https://www.crunchbase.com/organization/risk-ledger)
5. [LinkedIn - Risk Ledger](https://uk.linkedin.com/company/risk-ledger)

## Other roles at Risk Ledger

- [Field Marketing Manager, US (Chicago, Hybrid)](https://feeny.ai/job/field-marketing-manager-us-chicago-hybrid-risk-ledger-chicago-c9jm3p16dghe) — Chicago, IL
- [Engineering Manager](https://feeny.ai/job/engineering-manager-risk-ledger-london-zzwh8bs8w73j) — London, United Kingdom
- [Platform Engineer](https://feeny.ai/job/platform-engineer-risk-ledger-london-6d2zn9fr58pq) — London, United Kingdom
- [Senior Product Engineer](https://feeny.ai/job/senior-product-engineer-risk-ledger-london-q9tf8d4j812x) — London, United Kingdom
- [Senior Security Operations Engineer](https://feeny.ai/job/senior-security-operations-engineer-samsara-poland-jkdm9h5nc3pq) — Poland
- [Senior Security Operations Engineer](https://feeny.ai/job/senior-security-operations-engineer-samsara-netherlands-qv8exhw6cw9n) — Netherlands
- [Senior Security Operations Engineer](https://feeny.ai/job/senior-security-operations-engineer-tines-ireland-r852t732j2x1) — Ireland
- [Senior Security Operations Engineer](https://feeny.ai/job/senior-security-operations-engineer-everpure-bengaluru-e3d14scebqe4) — Bengaluru, India
- [Senior Security Operations Engineer](https://feeny.ai/job/senior-security-operations-engineer-coreweave-livingston-hbdrq9y46zjq) — Livingston, NJ
- [Senior Security Operations Engineer](https://feeny.ai/job/senior-security-operations-engineer-samsara-california-v39r870k7w0z) — California, United States