Security Operations Engineer

Join us at EIT:

At the Ellison Institute of Technology (EIT), we’re on a mission to translate scientific discovery into real world impact. We bring together visionary scientists, technologists, engineers, researchers, educators and innovators to tackle humanity’s greatest challenges in four transformative areas:

• Health, Medical Science & Generative Biology
• Food Security & Sustainable Agriculture
• Climate Change & Managing CO₂
• Artificial Intelligence & Robotics

This is ambitious work - work that demands curiosity, courage, and a relentless drive to make a difference. At EIT, you’ll join a community built on excellence, innovation, tenacity, trust, and collaboration, where bold ideas become real-world breakthroughs. Together, we push boundaries, embrace complexity, and create solutions to scale ideas from lab to society. Explore more at www.eit.org.

Your Role:

At EIT we are seeking a proactiveSecurity Operations Engineerwith demonstrable experience to help protect our people, platforms, and world‑class research. This is a hands‑on, impactful role at the centre of our cyber‑security function, combining monitoring, incident response, detection engineering, and continuous improvement of our security posture.

You will work closely with IT, research computing, governance, and legal teams to ensure that security enables, not hinders scientific innovation. If you want to be part of a mission‑driven environment and play a critical role in safeguarding breakthrough research, we’d love to hear from you.

Your Responsibilities:

In this role, you will:

• Operate and continuously enhance security monitoring across endpoints, servers, cloud platforms, and networks.
• Tune and maintain SIEM tools (including Sophos Taegis, SentinelOne EDR, and OCI security tooling) to improve detection accuracy.
• Investigate and triage security alerts, escalating and responding appropriately.
• Act as a responder for security incidents, supporting containment, eradication, and recovery.
• Produce clear incident documentation, including reports and root‑cause analysis.
• Develop and refine detection rules, automation workflows, and threat‑based use cases.
• Apply threat intelligence to improve detection coverage in complex research environments.
• Support vulnerability scanning, prioritisation, and remediation tracking.
• Collaborate closely with stakeholders to embed secure practices into day‑to‑day operations.
• Contribute to runbooks, documentation, audits, compliance activities, and risk assessments.