Job Search

We are seeking an experienced Cyber Security Operations professional to lead and strengthen day-to-day security monitoring, incident response and operational resilience. This role will suit a technically capable manager or senior engineer who can combine hands-on expertise with effective leadership, stakeholder engagement and continuous improvement.

You will oversee the operation of security monitoring and response capabilities, ensuring that alerts, incidents and vulnerabilities are identified, investigated and resolved within agreed service levels. Responsibilities will include managing the security operations function, coordinating incident response activities, conducting root-cause analysis and maintaining clear, accurate documentation. You will also help develop playbooks, operational procedures, reporting metrics and security improvements based on emerging threats and lessons learned.

The role will involve working closely with infrastructure, engineering, technology and risk teams to improve detection, protection and recovery measures across a complex environment. You will support the design and tuning of security monitoring use cases, contribute to threat hunting and vulnerability management, and provide clear updates to technical and senior stakeholders. Where required, you will coordinate third-party providers and assist with security audits, control testing and regulatory requirements.

Applicants should have significant experience in cyber security operations, security engineering or incident response, with a strong understanding of security information and event management, endpoint detection and response, identity security, network protection and cloud technologies. Experience leading operational teams or projects is highly desirable, alongside practical knowledge of recognised security frameworks and incident management methodologies.

You will be expected to demonstrate strong analytical and problem-solving skills, sound judgement under pressure and the ability to communicate complex technical issues clearly. Relevant industry certifications or equivalent professional experience are welcome. A proactive approach, commitment to continual learning and the ability to build effective relationships across technical and non-technical teams are essential.

We are seeking an experienced Senior Consultant or Manager, Cyber Security Operations Engineer to help design, deliver and improve security operations capabilities across a range of complex environments. This is an opportunity to provide technical leadership, work closely with senior stakeholders and support clients in managing and reducing cyber risk.

You will be responsible for developing and implementing security monitoring, detection and response solutions, ensuring that controls are effective, proportionate and aligned with business requirements. Your duties will include investigating security alerts and incidents, analysing logs and threat intelligence, tuning detection rules, supporting vulnerability management and contributing to incident response and recovery activities.

The role will also involve reviewing existing security operations processes, identifying opportunities for improvement and providing practical recommendations. You may lead technical workstreams, oversee delivery teams, produce high-quality documentation and present findings to both technical and non-technical audiences. At Manager level, you will additionally support the development of junior colleagues, contribute to proposals and manage project delivery, priorities and stakeholder relationships.

Applicants should have substantial experience in cyber security operations, security engineering, incident response or a closely related discipline. You will have a strong understanding of security information and event management, endpoint detection and response, network security, identity and access management, cloud security and common attack techniques. Experience with security orchestration and automation, threat hunting, digital forensics or penetration testing would be advantageous.

Relevant professional certifications, such as CISSP, CISM, GIAC, Microsoft, AWS or equivalent qualifications, are desirable. You should be analytical, commercially aware and confident working independently or as part of a collaborative team. Strong communication skills, sound judgement and the ability to translate technical issues into clear business risks are essential. A willingness to travel occasionally and work flexibly in response to operational requirements may be required.

We are seeking a Senior Consultant or Manager, Cyber Security Operations Engineer to strengthen and develop security operations capabilities across a complex technology environment. This is an opportunity to provide technical leadership, improve operational resilience and help shape the processes, platforms and standards used to detect, investigate and respond to cyber threats.

You will lead or contribute to the design, implementation and continual improvement of security operations services, including security monitoring, incident response, threat detection, vulnerability management and security engineering. Working closely with technology, risk and business stakeholders, you will translate security requirements into practical solutions and ensure that controls are effective, proportionate and aligned with recognised industry standards.

Key responsibilities will include developing and tuning detection use cases; investigating and coordinating responses to security incidents; improving security information and event management (SIEM) and endpoint detection and response (EDR) capabilities; supporting threat hunting and intelligence-led security activity; and producing clear technical documentation, reports and recommendations. You will also help define operating models, procedures and service improvements, while coaching colleagues and providing constructive challenge to delivery teams and third-party suppliers.

The successful candidate will have substantial experience in cyber security operations, security engineering or a closely related discipline, with a strong understanding of incident management, monitoring technologies, network and endpoint security, identity controls and cloud environments. Experience with SIEM, EDR, SOAR or vulnerability management platforms is highly desirable, as is the ability to automate and improve processes using scripting or similar technical tools.

You will be an analytical and confident communicator, able to explain complex security issues to both technical and non-technical audiences. A structured approach to problem-solving, strong stakeholder management skills and the ability to work independently in a fast-moving environment are essential. Relevant professional certifications or demonstrable equivalent experience will be welcomed. This role may require participation in an out-of-hours incident response or on-call rota.

We are seeking an experienced cyber security operations professional to lead and strengthen the organisation’s capability to detect, investigate and respond to cyber threats. This role is suited to a senior manager or highly experienced cyber security operations engineer who can combine technical expertise with effective leadership, stakeholder engagement and continuous improvement.

You will oversee day-to-day security operations, ensuring that monitoring, alert triage, incident response and threat management activities are delivered effectively. Working closely with internal technology teams and external partners, you will coordinate the response to security incidents, assess business impact, support remediation and ensure that lessons learned are incorporated into future processes.

Key responsibilities will include managing and developing security operations procedures, playbooks and response plans; overseeing the use of security monitoring and detection technologies; investigating suspicious activity; and providing clear, timely reporting to senior stakeholders. You will also contribute to vulnerability management, threat hunting, security investigations, cyber exercises and the continual improvement of operational resilience.

The successful candidate will have substantial experience in a cyber security operations, security engineering or incident response environment, with a strong understanding of security operations centres, SIEM platforms, endpoint detection and response, identity security and network monitoring. Experience of analysing security events, leading incident investigations and translating technical risks into practical business actions is essential.

You should be able to demonstrate experience of leading teams, mentoring technical specialists and managing priorities in a fast-paced environment. Relevant professional certifications, such as CISSP, CISM, GIAC or equivalent, would be advantageous. Strong communication, analytical and problem-solving skills are required, together with a proactive approach and a commitment to maintaining high standards of security and service delivery.