SecOps Engineering Lead

As SecOps Engineering Lead at Wayve, you’ll lead and develop our security operations capability. You will be accountable for detection, monitoring, response, and threat intelligence across our IT and OT environments, from SaaS and public cloud infrastructure to our fleet of autonomous vehicles.

This is an individual contributor role initially, with scope to build and lead a team to meet the growing needs of Wayve. You’ll establish processes, operate and manage security tooling, and ensure that Wayve can quickly and effectively detect, investigate, and respond to evolving threats.

Key responsibilities:

• Monitoring & Detection
• Operate and mature real-time monitoring, respond to reports from staff, and detect malicious activity using logging infrastructure and threat intelligence.
• Incident Response
• Lead response activities, coordinate containment, investigation and recovery, and ensure lessons learned are documented and shared.
• Vulnerability Oversight
• Track vulnerabilities across systems, monitor remediation progress, and support infrastructure owners with resolution.
• Threat Intelligence & Hunting
• Maintain an up-to-date view of the threat landscape, integrate threat intel into detection, and proactively hunt for compromise indicators.
• Strategy & Capability Development
• Define and deliver a roadmap for scaling and continuously improving Wayve’s security operations capability, addressing people, processes, and tools
• Evaluate, select, and operate security tooling, collaborating with internal teams and external vendors to ensure comprehensive detection coverage.

In order to set you up for success as SecOps Engineering Lead at Wayve, we’re looking for the following skills and experience.  

Essential 

• Proven experience in security operations, monitoring/detection, and vulnerability management within a hybrid on-prem/cloud environment
• Led or played a key role in responding to a significant cyber security incident
• Strong working knowledge of security operations frameworks (e.g. MITRE ATT&CK), detection engineering, and incident response workflows
• Hands-on experience with a range of security tools (SIEM, EDR, logging platforms, threat intel feeds)
• Ability to make sound decisions independently in time-sensitive situations
• Strong communicator across both technical and non-technical audiences
• Bachelor’s degree (or equivalent) in any relevant discipline, demonstrating strong analytical, problem-solving, and communication skills

Desirable 

• Experience building or scaling a SOC or security operations capability
• Familiarity with safety-critical and/or operational environments
• Relevant security certifications (e.g. GCIH, GSOC, OSCP, CISSP, CISM etc)

This is a full-time role based in our offices in London or Sunnyvale.  At Wayve we want the best of all worlds so we operate a hybrid working policy that combines time together in our offices and workshops to fuel innovation, culture, relationships and learning, and time spent working from home.  We operate core working hours so you can determine the schedule that works best for you and your team.