Job Search

We are seeking a Consultant, Cyber Security Operations Engineer to support the delivery and continuous improvement of security operations across a complex technology environment. This role will suit an experienced cyber security professional who can combine strong technical capability with consultancy skills, helping to identify threats, strengthen controls and improve the organisation’s overall security resilience.

You will monitor, investigate and respond to security alerts and incidents across cloud, infrastructure, endpoint and network environments. Working with internal teams and external partners, you will conduct threat hunting, analyse event data, support digital forensics and contribute to the development of effective incident response procedures. You will also assist with vulnerability management, security monitoring and the review of emerging threats, ensuring that appropriate mitigations are identified and implemented.

A key part of the role will involve providing expert advice on security operations, producing clear technical documentation and contributing to security standards, operating procedures and service improvements. You will work collaboratively with engineering, risk, compliance and technology teams to embed secure practices and ensure that operational controls remain effective. The role may also involve supporting security testing, audit activity, reporting and the assessment of new tools and technologies.

Applicants should have practical experience in a cyber security operations, incident response, security engineering or related role. You will have a sound understanding of security monitoring and SIEM technologies, endpoint detection and response, network security, identity and access management, vulnerability management and cloud security principles. Experience of scripting or automation, together with familiarity with recognised security frameworks and industry best practice, would be advantageous.

You will be analytical, organised and confident communicating with both technical and non-technical stakeholders. The ability to manage competing priorities, explain complex issues clearly and remain composed during security incidents is essential. Relevant professional certifications or demonstrable equivalent experience are welcomed.

We are seeking a Consultant, Cyber Security Operations Engineer to support the delivery, improvement and ongoing management of effective security operations capabilities. This role will suit an experienced cyber security professional who can combine strong technical knowledge with a consultative approach, helping teams identify threats, strengthen controls and respond confidently to security incidents.

You will design, implement and optimise security monitoring and response processes across a range of technologies and environments. Responsibilities will include investigating alerts, analysing security events, conducting threat hunting and supporting incident response activities. You will work with Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), vulnerability management and cloud security tooling, ensuring that detection rules, playbooks and operational procedures remain effective and aligned with current threats.

The role will also involve advising stakeholders on security operations maturity, developing technical recommendations and contributing to the delivery of improvement programmes. You will produce clear reports and documentation, support risk assessments, contribute to security testing and help establish repeatable processes that improve resilience. Where required, you will assist with incident investigations, root-cause analysis and lessons-learned reviews.

Applicants should have practical experience in a cyber security operations, engineering or consulting role, with a sound understanding of threat detection, incident management, vulnerability remediation and security monitoring. Experience with SIEM platforms, EDR solutions, cloud services and scripting or automation tools is highly desirable. Knowledge of security frameworks such as NIST, ISO 27001 or CIS Controls would be advantageous.

You will need excellent analytical and problem-solving skills, strong written and verbal communication, and the ability to explain technical issues to both specialist and non-specialist audiences. A proactive mindset, attention to detail and the ability to manage competing priorities are essential. Relevant professional certifications or demonstrable equivalent experience will be welcomed.

We are seeking an experienced Senior Consultant or Manager, Cyber Security Operations Engineer to help design, deliver and improve security operations capabilities across a range of complex environments. This is an opportunity to provide technical leadership, work closely with senior stakeholders and support clients in managing and reducing cyber risk.

You will be responsible for developing and implementing security monitoring, detection and response solutions, ensuring that controls are effective, proportionate and aligned with business requirements. Your duties will include investigating security alerts and incidents, analysing logs and threat intelligence, tuning detection rules, supporting vulnerability management and contributing to incident response and recovery activities.

The role will also involve reviewing existing security operations processes, identifying opportunities for improvement and providing practical recommendations. You may lead technical workstreams, oversee delivery teams, produce high-quality documentation and present findings to both technical and non-technical audiences. At Manager level, you will additionally support the development of junior colleagues, contribute to proposals and manage project delivery, priorities and stakeholder relationships.

Applicants should have substantial experience in cyber security operations, security engineering, incident response or a closely related discipline. You will have a strong understanding of security information and event management, endpoint detection and response, network security, identity and access management, cloud security and common attack techniques. Experience with security orchestration and automation, threat hunting, digital forensics or penetration testing would be advantageous.

Relevant professional certifications, such as CISSP, CISM, GIAC, Microsoft, AWS or equivalent qualifications, are desirable. You should be analytical, commercially aware and confident working independently or as part of a collaborative team. Strong communication skills, sound judgement and the ability to translate technical issues into clear business risks are essential. A willingness to travel occasionally and work flexibly in response to operational requirements may be required.

We are seeking a Senior Consultant or Manager, Cyber Security Operations Engineer to strengthen and develop security operations capabilities across a complex technology environment. This is an opportunity to provide technical leadership, improve operational resilience and help shape the processes, platforms and standards used to detect, investigate and respond to cyber threats.

You will lead or contribute to the design, implementation and continual improvement of security operations services, including security monitoring, incident response, threat detection, vulnerability management and security engineering. Working closely with technology, risk and business stakeholders, you will translate security requirements into practical solutions and ensure that controls are effective, proportionate and aligned with recognised industry standards.

Key responsibilities will include developing and tuning detection use cases; investigating and coordinating responses to security incidents; improving security information and event management (SIEM) and endpoint detection and response (EDR) capabilities; supporting threat hunting and intelligence-led security activity; and producing clear technical documentation, reports and recommendations. You will also help define operating models, procedures and service improvements, while coaching colleagues and providing constructive challenge to delivery teams and third-party suppliers.

The successful candidate will have substantial experience in cyber security operations, security engineering or a closely related discipline, with a strong understanding of incident management, monitoring technologies, network and endpoint security, identity controls and cloud environments. Experience with SIEM, EDR, SOAR or vulnerability management platforms is highly desirable, as is the ability to automate and improve processes using scripting or similar technical tools.

You will be an analytical and confident communicator, able to explain complex security issues to both technical and non-technical audiences. A structured approach to problem-solving, strong stakeholder management skills and the ability to work independently in a fast-moving environment are essential. Relevant professional certifications or demonstrable equivalent experience will be welcomed. This role may require participation in an out-of-hours incident response or on-call rota.