Edtech.com's Summary

Pearson is hiring a Principal, Security Operations to lead day-to-day work in its Security Operations Center (SOC), reporting to the SOC Manager. The role advances detection engineering, responds to incidents across Pearson's environments, and refines SOC processes to meet regulatory requirements. The work is hybrid and includes an on-call rotation that keeps the SOC covered around the clock.

Highlights

Lead and execute advanced SOC operations, including incident detection, triage, containment, and root cause analysis, and take part in an on-call schedule to cover non-office hours.
Develop, implement, and optimize detection logic, playbooks, and automated response workflows to reduce mean time to containment and improve SOC efficiency.
Assess and improve SOC processes and procedures so they stay aligned with evolving threats and best practices.
Work with threat intelligence teams to analyze emerging risks and bring relevant tactics, techniques, and procedures into SOC operations.
Act as a trusted advisor to internal stakeholders by translating technical findings into actionable insights.
Ensure SOC activities comply with relevant standards such as NCSC and Cyber Essentials Plus and with Pearson policies, and deliver executive-level reporting, risk assessments, and metrics.
Requires four or more years in security operations, incident response, and detection engineering, hands-on expertise with SOAR, EDR, NDR, and SIEM technologies, and experience with AWS, Azure, or GCP.
Must have experience working with regulated environments or government clients; understanding of FedRAMP, GovRAMP, and StateRAMP, cloud security, and red and purple team collaboration is preferred.

Principal, Security Operations Full Description

Business Unit: SOC

Location: Durham (Hybrid)

Reports To: SOC Manager

Skip-Level Manager: Senior Director of Security Operations

Role Summary:

The Security Operations Center (SOC) is seeking a highly skilled and proactive Senior Security Analyst to lead day-to-day security operations, drive continuous process improvement, and advance detection engineering across Pearson's environments. This role is pivotal in safeguarding critical assets through rapid incident response, automation, and collaboration with internal and external partners. You will be responsible for refining SOC processes, developing detection capabilities, and ensuring alignment with Pearson's security standards and regulatory requirements.

Key Responsibilities:

Security Operations Leadership:

Lead and execute advanced SOC operations, including incident detection, triage, containment, and root cause analysis across Pearson environments. Requirement to work on-call schedule to ensure 24x7 coverage during non-office hours.

Detection Engineering & Automation:

Develop, implement, and optimize detection logic, playbooks, and automated response workflows to reduce mean time to containment and improve SOC efficiency.

Process Improvement:

Continuously assess and enhance SOC processes and procedures, ensuring best practices and alignment with evolving threat landscapes.

Threat Intelligence Integration:

Collaborate with threat intelligence teams to analyze emerging risks and integrate relevant TTPs (Tactics, Techniques, and Procedures) into SOC operations.

Stakeholder Engagement:

Act as a trusted advisor to internal stakeholders, translating technical findings into actionable insights and ensuring transparency throughout security operations.

Compliance & Governance:

Ensure all SOC activities comply with relevant standards (e.g., NCSC, Cyber Essentials Plus) and internal Pearson policies.

Reporting & Metrics:

Deliver executive-level reporting, risk assessments, and metrics to demonstrate the effectiveness of SOC operations.

Required Skills & Experience:

Must have experience working with regulated environments or government clients.
Proven experience in security operations, incident response, and detection engineering (4+ years)
Hands-on expertise with SOAR, EDR, NDR, and SIEM technologies
Experience with one or more Cloud Service Providers (AWS, Azure, GCP)
Strong background in multitasking, adapting, and thriving in fast-paced environments
Excellent communication skills, especially in stakeholder management and translating technical risk to non-technical audiences

Preferred Qualifications:

US - Strong understanding of FedRAMP, GovRAMP and StateRAMP policies and practices.
UK - Strong understanding of UK GDPR, Cyber Essentials and NCSC Guidance.
Knowledge of cloud security (AWS, Azure, GCP) and hybrid infrastructure

Experience collaborating with red/purple teams and defensive teams

Pearson is an Equal Opportunity Employer and a member of E-Verify. Employment decisions are based on qualifications, merit and business need. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, sexual orientation, gender identity, gender expression, age, national origin, protected veteran status, disability status or any other group protected by law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act.

If you are an individual with a disability and are unable or limited in your ability to use or access our career site as a result of your disability, you may request reasonable accommodations by emailing [email protected].

Job: Security

Job Family: TECHNOLOGY

#LI-REMOTE

Let me find your next job.

Thanks - you're signed up.

Principal, Security Operations

Edtech.com's Summary

Principal, Security Operations Full Description

IT Security Specialist/ Analyst I

IT Security Professional - 2

IAM Engineer

Senior IT Fraud Analyst

Data Security Engineer