Location
London

Hours
Shift work including weekends, holidays, and participation in shift lead on-call rotation

Salary
Negotiable

About the Role
At eBay, we are transforming the future of ecommerce by connecting millions of buyers and sellers across more than 190 markets worldwide. Join our Core Technology (CT) team, responsible for the end-to-end technology platform that powers ebay.com. As a Security Operations Engineer within eBay's Computer Security Incident Response Team (CSIRT), you will lead efforts to identify, mitigate, and respond to information security threats. You will creatively solve complex security challenges in a diverse environment and help build one of the best CSIRT teams in the industry.

Your core responsibilities include guiding the CSIRT team in daily operations, managing escalations and ticket queues, developing and executing security controls to defend against internal and external attacks, researching security breaches and designing countermeasures, communicating security impacts to management, and performing digital forensics in collaboration with HR and legal teams. This role requires a proactive approach to incident response, leadership in shift rotations, and a commitment to protecting eBay's critical information assets.

Experience
Minimum five (5) years of professional experience in incident detection and response, malware analysis, or digital forensics. At least three (3) years of specialised experience in one or more of the following areas: Security Assessment or Offensive Security, Application Security, Security Operations Centre/Security Incident Response, Cyber Intelligence Analysis.

About you
Strong leadership skills with the ability to guide a team and manage escalations. Comfortable working shift patterns including weekends, holidays, and on-call rotations. Skilled in incident response, offensive security techniques, log analysis using SIEM tools, system forensics, and networking fundamentals. Proficient in scripting languages such as Python or Perl. Able to perform risk analysis by evaluating vulnerabilities within specific environments.

Qualifications
Bachelor’s degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related field. Must hold at least one relevant certification from the following:
- SANS GIAC (e.g., GCED, GCIA, GCFA, GPEN, GWAPT, GCFE, GSNA, GPPA, GAWN, GWEB, GNFA, GREM, GXPN, GMON, GCIH)
- ISC2 (e.g., CCFP, CCSP, CISSP)
- Cisco (CCNA, CCNP)
- CERT (CSIH)
- EC Council (e.g., CEH, ENSA, CNDA, ECSS, ECSP, ECES, CHFI, LPT, ECSA, ECIH)
- Offensive Security (OSCP, OSCE, OSWP, OSEE)
- EnCase (EnCE)