Job Search

We are seeking an experienced IT Security Operations Lead to take responsibility for the effective operation, monitoring and continual improvement of security services across a complex technology environment. This is a hands-on leadership role, combining operational oversight with technical expertise to help protect systems, data and users from evolving cyber threats.

You will lead day-to-day security operations, ensuring that alerts, incidents and vulnerabilities are identified, assessed and managed promptly. Working closely with infrastructure, cloud, applications and service teams, you will coordinate investigations, oversee containment and recovery activities, and ensure that lessons learned are translated into practical improvements. You will also help maintain clear, accurate records and provide regular updates on security risks, incidents and performance.

Key responsibilities will include managing security monitoring and incident response processes; supporting the development and testing of cyber response plans; overseeing vulnerability management and remediation; and contributing to the implementation of appropriate security controls. You will review operational procedures, help maintain security documentation, and support audit, assurance and compliance activities. The role will also involve managing relationships with external security providers and helping to develop the capability of security operations colleagues.

The successful candidate will have substantial experience in IT security operations, security monitoring or incident response, together with a strong understanding of threat detection, vulnerability management and security technologies. Experience of working with SIEM, endpoint detection and response, firewalls, identity platforms and cloud security controls is highly desirable. You should be comfortable analysing complex incidents, making sound decisions under pressure and communicating technical issues clearly to both technical and non-technical audiences.

Strong organisational and leadership skills are essential, as is the ability to prioritise competing demands and work collaboratively across teams. Professional qualifications such as CISSP, CISM, CompTIA Security+ or equivalent experience would be advantageous. A proactive approach, sound judgement and a commitment to continuous improvement will be central to success in this role.

We are seeking an experienced Security Operations Lead to oversee the day-to-day delivery and continuous improvement of a modern security operations function. This is a key role for a confident security professional who can combine strong technical knowledge with effective leadership, ensuring that threats are identified, investigated and addressed promptly.

You will lead the monitoring, triage and investigation of security alerts across a varied technology estate, coordinating the response to incidents and ensuring that appropriate containment, eradication and recovery actions are completed. You will help maintain and improve security monitoring capabilities, including SIEM, endpoint detection and response, vulnerability management and threat intelligence platforms.

The role will involve developing and maintaining incident response procedures, playbooks and operating standards, as well as overseeing post-incident reviews and the implementation of lessons learned. You will work closely with infrastructure, cloud, applications, risk and compliance teams to strengthen protective controls and reduce operational risk. You will also provide clear updates to senior stakeholders, contribute to security reporting and support the development of meaningful operational metrics.

As a team lead, you will coach and develop security analysts, help manage priorities and workloads, and promote a culture of collaboration, accountability and continual learning. You may also support the management of third-party providers and participate in an out-of-hours incident response rota when required.

Applicants should have substantial experience in a security operations, incident response or SOC leadership role, with a strong understanding of cyber threat detection, investigation and response. Experience working with SIEM and EDR technologies, security event analysis, vulnerability management and cloud security environments is essential. Familiarity with recognised frameworks such as MITRE ATT&CK, NIST or ISO 27001 would be advantageous.

You will need excellent communication and problem-solving skills, the ability to make sound decisions under pressure, and a practical approach to managing competing priorities. Relevant professional certifications, such as CISSP, CISM, GIAC or equivalent experience, are desirable. This role offers the opportunity to make a measurable contribution to organisational resilience while developing a high-performing security operations capability.

We are seeking an experienced Lead Cyber Security Operations Analyst to take a senior role in protecting critical systems, services and data. You will provide technical leadership within the security operations function, helping to identify, investigate and respond to threats while supporting the continuous improvement of security monitoring and incident response capabilities.

Key responsibilities will include leading the triage, investigation and resolution of security alerts and incidents across cloud, infrastructure, endpoint and network environments. You will coordinate incident response activity, assess potential impact, maintain accurate records and ensure that appropriate containment, eradication and recovery actions are completed. You will also contribute to threat hunting, vulnerability reviews, security investigations and the development of detection use cases.

The role will involve mentoring and supporting analysts, allocating operational workloads and acting as a point of escalation for complex or high-risk events. You will work closely with technology, risk, compliance and third-party teams to strengthen security controls and improve organisational resilience. You will produce clear reports and metrics for senior stakeholders, identify recurring issues and recommend practical improvements to processes, tooling and operational procedures.

Applicants should have substantial experience in a security operations, incident response or cyber defence environment, including experience of leading investigations or supervising technical teams. You will have strong knowledge of SIEM, EDR, vulnerability management and security monitoring technologies, together with an understanding of common attack techniques, threat intelligence and frameworks such as MITRE ATT&CK. Experience working with cloud platforms, automation or scripting languages would be advantageous.

Excellent analytical, communication and decision-making skills are essential, as is the ability to remain calm and organised during serious incidents. Relevant professional certifications, such as CISSP, CISM, GIAC or equivalent practical experience, are desirable. You must be willing to participate in an on-call or out-of-hours support rota where required.

We are seeking an experienced Security Operations Lead to oversee the day-to-day delivery, development, and continuous improvement of security operations. This role will lead a team of security professionals responsible for monitoring, detecting, investigating, and responding to cyber threats across a complex technology environment. You will establish effective operational processes, ensure consistent service quality, and help strengthen the organisation’s overall security posture through practical, risk-based improvements.

Key responsibilities include managing security monitoring and incident response activities, coordinating the investigation and containment of security incidents, and ensuring that incidents are documented, escalated, and resolved in line with agreed procedures. You will oversee the use and optimisation of security tools such as SIEM, EDR, vulnerability management, identity protection, and threat intelligence platforms. The role will also involve developing and maintaining playbooks, operating procedures, metrics, and reporting for senior stakeholders. You will work closely with infrastructure, engineering, application, risk, compliance, and business teams to identify vulnerabilities, reduce exposure, and support the secure delivery of new services. As a team lead, you will coach and develop colleagues, manage priorities, contribute to workforce planning, and promote a culture of continuous learning and accountability.

Applicants should have proven experience in a security operations, incident response, or cyber defence leadership role, together with strong knowledge of security monitoring, threat detection, vulnerability management, and cyber incident handling. Experience leading or mentoring technical teams and working with outsourced or third-party security providers would be advantageous. You should be comfortable analysing complex situations, making sound decisions under pressure, and communicating clearly with both technical and non-technical audiences. Relevant professional certifications in information security, incident response, cloud security, or security operations are desirable. The successful candidate will be collaborative, organised, commercially aware, and committed to maintaining high standards of confidentiality, resilience, and operational excellence.

We are seeking an experienced Security Operations Lead to oversee the day-to-day delivery, development and continuous improvement of security operations. This role will provide leadership across monitoring, incident response, threat detection, vulnerability management and security tooling, ensuring that risks are identified, investigated and addressed promptly. You will lead a team of security analysts and work closely with technology, infrastructure, compliance and business stakeholders to strengthen defensive capabilities and maintain a resilient operating environment.

Key responsibilities include managing security monitoring and alert triage, coordinating the response to security incidents, and ensuring investigations are documented through to resolution. You will establish and refine operational procedures, playbooks, escalation routes and performance measures, while overseeing the effective use of SIEM, EDR, vulnerability management and other security platforms. The role will also involve reviewing emerging threats, contributing to threat modelling and security assessments, supporting audit and regulatory requirements, and producing clear reports for senior stakeholders. You will coach and develop team members, manage priorities and third-party relationships, and help shape the organisation’s wider security strategy.

Applicants should have substantial experience in a security operations, cyber defence or incident response leadership role, with a strong understanding of security monitoring, threat detection, investigation methodologies and risk management. Experience leading or mentoring technical teams, managing security tooling and responding to complex incidents is essential. Relevant certifications such as CISSP, CISM, GIAC or equivalent are desirable, alongside practical knowledge of common security frameworks and controls. Strong communication, decision-making and stakeholder management skills are required, together with the ability to remain calm under pressure, translate technical issues for non-technical audiences and drive measurable improvements in a changing environment.

We are seeking a Senior Lead Security Operations Analyst to provide technical leadership across security monitoring, incident response, threat detection and operational resilience. You will guide a team of analysts, coordinate the effective operation of security monitoring capabilities, and help ensure that cyber threats are identified, investigated and contained promptly. Working closely with technology, risk and business stakeholders, you will provide clear advice on security events, emerging threats and appropriate remediation activities.

Your responsibilities will include leading the analysis and response to complex security incidents, reviewing alerts and investigations, and improving processes across the security operations function. You will oversee the development and tuning of detection use cases, correlation rules, dashboards and automated response workflows within SIEM, SOAR, EDR and related security platforms. You will also contribute to threat hunting, vulnerability investigations, forensic analysis and post-incident reviews, ensuring that lessons learned are translated into measurable improvements. The role will involve producing accurate management reports, maintaining operational documentation, supporting audit requirements and helping to define and track security performance metrics.

Applicants should have substantial experience in a security operations, incident response or cyber defence environment, including experience leading or mentoring analysts. Strong practical knowledge of SIEM technologies, endpoint protection, network security monitoring, threat intelligence and incident management is essential. You should be confident analysing complex technical data, identifying attack patterns and communicating risks to both technical and non-technical audiences. Experience with security frameworks such as MITRE ATT&CK, NIST or ISO 27001, along with relevant professional certifications, would be advantageous. The successful candidate will demonstrate sound judgement, excellent organisation, a collaborative leadership style and the ability to remain calm and decisive during high-priority incidents.

We are seeking a Lead Information Security Operations Analyst to provide senior-level expertise within a security operations function. This role will lead the monitoring, investigation and response to cyber security incidents across enterprise systems, networks, cloud environments and business applications. You will act as a point of escalation for complex threats, help coordinate incident response activities and ensure that security events are assessed, prioritised and resolved in line with established procedures.

Key responsibilities include overseeing the analysis of alerts from security information and event management, endpoint detection and response, identity and access management, vulnerability management and other security tooling. You will investigate suspicious activity, conduct threat hunting, support digital forensics and produce clear incident reports for technical and non-technical stakeholders. The role will also involve developing and improving playbooks, procedures, detection rules and operational metrics; identifying opportunities to automate repetitive activities; and contributing to security monitoring coverage, risk reduction and continuous service improvement. You may also provide guidance to analysts, review investigation quality and support the development of team capability.

The successful candidate will have substantial experience in security operations, incident response or a closely related discipline, with a strong understanding of common attack methods, threat intelligence, vulnerability management and security controls. Experience with SIEM and EDR technologies, log analysis, scripting or automation, and investigation within cloud and hybrid environments is highly desirable. You should be confident working under pressure, able to communicate complex security issues clearly and comfortable collaborating with infrastructure, application, risk and compliance teams. Relevant professional certifications in areas such as security operations, incident handling, cloud security or information security are advantageous. A methodical approach, strong judgement, curiosity and a commitment to maintaining high operational standards are essential.