We’re on a mission to make money work for everyone. We’re waving goodbye to the complicated and confusing ways of traditional banking. After starting as a prepaid card, our product offering has grown a lot in the last 10 years in the UK. As well as personal and business bank accounts, we offer joint accounts, accounts for 16‑17 year olds, a free kids account and credit cards in the UK, with more exciting things to come beyond. Our UK customers can also save, invest and combine their pensions with us.
We’re not about selling products – we want to solve problems and change lives through Monzo.
London/Cardiff/UK Remote | £40,000 - £55,000 + Incentive Awards tied to your performance | Benefits
Security Operations team
To make money work for everyone, we must protect our customers, our data, and our systems. You will join our Security Operations Squad to detect threats, respond to incidents, and improve our defences without disrupting the people who use our bank.
We want you to join us if you want to specialise in Incident Response. You do not need to be an Incident Lead right now. You will work alongside our senior team members to investigate security events, from the initial alert through to recovery. As you build your skills and confidence, we will support you to lead these responses.
We protect our team from alert fatigue by taking a proactive approach. You will hunt for new threats and automate our detection methods. We give you the tools and autonomy to automate repetitive tasks, which gives you the time to focus entirely on the analytical work of tracking and stopping advanced adversaries.
We invest heavily in the people who protect the bank. We actively monitor workloads to prevent alert fatigue, we run blameless incident reviews, and we support each other. You do not need to master every security domain on day one. We will give you the mentorship, resources, and time to learn and develop your skills.
You’ll play a key role by
* Investigating security events. Youll work alongside our senior team members to navigate incidents across our network, endpoints, and cloud systems. Youll play an active role from the initial alert through to recovery, and as you build your skills and confidence, we will support you to lead these responses.
* Proactively hunting for threats. You test theories about how attackers might target us and search for hidden threats across our systems before they trigger alerts.
* Spotting real threats. You fine‑tune our alerts so we only spend time looking at genuine risks. You use these alerts to drive your incident response investigations, focusing your energy on stopping attackers.
* Automating repetitive work. You build automations that handle routine tasks, giving the squad time to focus on complex, analytical challenges.
* Learning from past incidents. You run blameless reviews after incidents to find the root cause, using those lessons to improve our security controls across the business.
* Tracking threat intelligence. You research the attackers that pose a risk to us and turn that knowledge into active, automated defences.
We’d love to hear from you if
* You have hands‑on incident response experience. You have worked in a Security Operations Centre (SOC) and feel confident investigating security events and supporting the wider team during complex incidents.
* You understand systems and networks deeply. You know how operating systems (macOS, Windows, Linux) and networks work under the hood, and you understand modern attack methods.
* You automate your workflows. You hate doing the same manual task twice and have experience using scripting languages (like Python or Go) to build automated tools and interact with APIs.
* You solve problems independently. You can navigate tricky investigations and figure out the right path forward, even when there isn’t a step‑by‑step guide to follow.
* You communicate clearly. You can explain highly technical forensic findings in everyday language to people who don’t work in security.
* You have experience with cloud or detection engineering. It is a bonus (but not essential) if you have worked with cloud platforms like AWS or Azure, written detection rules as code, or hold practical security certifications.
What’s In It For You
* £40,000 - £55,000 + Incentive Awards tied to your performance
* Role can be based in our London office, but we are open to distributed working within the UK (with ad‑hoc meetings in London).
* We offer flexible working hours and trust you to work enough hours to do your job well, and at times that suit you and your team.
* £1,000 learning budget each year to use on books, training courses and conferences.
* Work from home setup; all employees are given MacBooks and for fully remote workers we will provide extra support for your work‑from‑home setup.
Equal opportunities for everyone
Diversity and inclusion are a priority for us and we’re making sure we have lots of support for all of our people to grow at Monzo. We’re embracing diversity by fostering an inclusive environment for all people to do the best work of their lives with us. We are an equal opportunity employer. All applicants will be considered for employment without attention to age, ethnicity, religion, sex, sexual orientation, gender identity, family or parental status, national origin, veteran, neurodiversity or disability status.
J-18808-Ljbffr