Job Search

We are seeking a Security Operations Center Analyst (L2) to support the detection, investigation, and response to cybersecurity incidents across a complex technology environment. In this role, you will monitor security alerts and events from SIEM, EDR, network, identity, cloud, and other security platforms, escalating or containing threats in line with established procedures. You will investigate suspicious activity, validate incidents, assess potential business impact, and provide clear, timely updates to relevant stakeholders.

Your responsibilities will include performing advanced alert triage, analysing logs and indicators of compromise, conducting endpoint and network investigations, and coordinating incident response activities with internal technology and risk teams. You will contribute to threat hunting, detection-rule tuning, playbook development, vulnerability investigations, and post-incident reviews. Accurate documentation is essential, including maintaining incident records, producing investigation summaries, and identifying opportunities to improve monitoring, response processes, and overall security resilience. You may also support security tooling administration, reporting, audit requests, and out-of-hours escalation activities as required.

To succeed in this position, you should have practical experience in a SOC, incident response, cyber defence, or a closely related security function. You will need a strong understanding of security operations principles, common attack techniques, networking, operating systems, authentication, and cloud technologies. Experience with SIEM and endpoint detection platforms, log analysis, scripting, threat intelligence, and frameworks such as MITRE ATT&CK is highly desirable. Relevant professional certifications in cybersecurity, incident handling, or cloud security are advantageous. We are looking for an analytical and methodical professional who can work calmly under pressure, communicate technical findings clearly, collaborate effectively across teams, and demonstrate a proactive approach to continuous improvement.

We are seeking an experienced Lead SOC Manager to oversee the operation, development and continuous improvement of a Security Operations Centre. This role will provide strategic and operational leadership across cyber defence, ensuring the effective detection, investigation and response to security threats in a complex and evolving environment. You will manage a team of security analysts and specialists, promote a strong culture of collaboration and accountability, and ensure that security operations align with organisational risk appetite, regulatory requirements and business priorities.

Key responsibilities will include setting the SOC operating model, defining processes and performance standards, and managing day-to-day monitoring, triage, incident response and threat-hunting activities. You will oversee the use and optimisation of SIEM, SOAR, EDR and other security tooling, ensuring that detection rules, playbooks and intelligence are regularly reviewed and improved. The role will lead major incident coordination, root-cause analysis and post-incident reviews, while maintaining clear escalation procedures and accurate reporting. You will also manage relationships with internal technology teams, risk and compliance functions, and external security service providers. Additional duties will include developing team capability, supporting recruitment and performance management, managing budgets, and presenting security metrics, risks and recommendations to senior stakeholders.

The successful candidate will have significant experience leading a SOC, CSIRT or comparable cyber security operations function, together with a strong understanding of security monitoring, incident management, threat intelligence and vulnerability management. Professional experience with modern security platforms and operational frameworks such as MITRE ATT&CK, NIST or ISO 27001 is expected. Relevant industry certifications, such as CISSP, CISM, GIAC or equivalent, would be advantageous. You will be an assured people leader and communicator, capable of making sound decisions under pressure and translating complex technical issues into clear business impacts. A proactive, analytical and continuous-improvement mindset is essential, along with the ability to work effectively across technical and non-technical teams.

We are seeking an experienced Lead SOC Manager to oversee the effective operation and continuous development of a Security Operations Centre. This role will provide strategic and operational leadership across security monitoring, threat detection, incident response, vulnerability management and cyber threat intelligence. You will lead a team of security analysts and engineers, ensuring that the SOC delivers timely, accurate and actionable outcomes while maintaining a strong service-oriented approach to internal stakeholders and customers.

Key responsibilities will include setting SOC objectives, developing operating procedures and establishing measurable performance standards. You will manage the monitoring and response lifecycle, ensuring alerts are investigated, incidents are contained and root-cause analysis is completed. The role will oversee the use and optimisation of SIEM, SOAR, EDR and other security technologies, working with technical teams to improve detection coverage, automation and response capability. You will also coordinate major incident management, lead post-incident reviews and provide clear reporting on risk, trends, service performance and emerging threats to senior leadership.

The successful candidate will have substantial experience managing a SOC or comparable cyber security function, together with a strong understanding of security operations, incident response frameworks, threat intelligence and security architecture. Experience leading, coaching and developing technical teams is essential, as is the ability to manage suppliers, budgets, projects and competing priorities. Relevant professional certifications such as CISSP, CISM, GIAC or equivalent are desirable. You should be an excellent communicator who can translate complex technical issues into clear business impacts, make sound decisions under pressure and build effective relationships across technical and non-technical teams. A proactive approach to continuous improvement, strong analytical skills and a commitment to maintaining high standards of confidentiality and integrity are essential.

We are seeking a Security & Infrastructure Operations Centre (SIOC) Analyst to support the monitoring, protection and reliable operation of critical technology services. Working within a collaborative operations environment, you will help identify, investigate and respond to security events, infrastructure alerts and service disruptions. The role requires a methodical, customer-focused professional who can assess risk, prioritise competing incidents and communicate clearly with technical and non-technical stakeholders.

Your responsibilities will include monitoring security and infrastructure platforms, reviewing alerts and event logs, conducting initial triage, and escalating incidents in line with established procedures. You will investigate potential threats, support containment and remediation activities, and maintain accurate records within incident and service management systems. The role will also involve responding to operational issues, coordinating with infrastructure, application and third-party support teams, contributing to root-cause analysis, and providing timely updates throughout the incident lifecycle. You will help maintain operational runbooks, knowledge articles and reporting, while identifying opportunities to improve monitoring, automation, resilience and security controls. Participation in an agreed shift, on-call or out-of-hours rota may be required.

Applicants should have experience in a security operations, network operations, infrastructure support or service desk environment, with a sound understanding of incident management and operational security principles. Familiarity with SIEM, endpoint protection, vulnerability management, network monitoring, identity and access management, cloud services and ticketing platforms is desirable. You should be comfortable analysing logs and event data, following documented processes and working under pressure. Strong written and verbal communication, attention to detail and a commitment to continual learning are essential. Relevant certifications or practical experience in areas such as cybersecurity, IT service management, networking or cloud technologies would be advantageous.

We are seeking an experienced Lead SOC Manager to provide strategic and operational leadership for a modern Security Operations Centre. This role will be responsible for ensuring the effective detection, investigation and response to cyber threats across a complex technology environment. You will lead a team of security analysts and incident responders, promote a culture of continuous improvement, and ensure that security monitoring capabilities align with business risk and regulatory expectations.

Your responsibilities will include managing day-to-day SOC operations, defining and monitoring service-level objectives, and overseeing the development of use cases, alert triage processes and incident response playbooks. You will coordinate the investigation and containment of security incidents, lead post-incident reviews, and provide clear updates to senior stakeholders. The role will also involve managing relationships with internal technology teams and external security partners, supporting threat intelligence activities, and identifying opportunities to improve automation, detection engineering and operational resilience. You will contribute to security strategy, budget planning, audit activity and the implementation of recognised security frameworks and controls.

Applicants should have significant experience managing a SOC, CSIRT or comparable cyber security operations function, together with a strong understanding of security monitoring, SIEM, SOAR, endpoint detection and response, vulnerability management and cloud security. Experience leading incident response in a complex environment and working with outsourced or hybrid SOC models would be advantageous. You will be an effective people leader with a proven ability to coach technical specialists, manage priorities and communicate complex risks clearly to both technical and non-technical audiences. Relevant professional certifications, such as CISSP, CISM, GIAC or equivalent, are desirable. A proactive, analytical and collaborative approach is essential.

We are seeking an experienced Lead SOC Manager to oversee the effective operation, continuous improvement, and strategic development of a Security Operations Centre. This role will lead a team of security analysts and engineers responsible for monitoring, detecting, investigating, and responding to cyber threats across a complex technology environment. You will establish clear operational standards, maintain high-quality security monitoring, and ensure incidents are handled efficiently in line with defined procedures and service levels.

Key responsibilities will include managing day-to-day SOC activities, developing and refining incident response processes, and coordinating the investigation and containment of security events. You will oversee the use of SIEM, SOAR, EDR, threat intelligence, and vulnerability management tools, ensuring these capabilities deliver accurate and actionable outcomes. The role will also involve producing meaningful security metrics and reports, supporting audits and regulatory requirements, leading post-incident reviews, and driving improvements in detection engineering, playbooks, automation, and operational resilience. You will work closely with infrastructure, engineering, risk, compliance, and senior leadership teams to communicate threats and strengthen the organisation’s overall security posture.

The successful candidate will have substantial experience managing or leading a SOC, cyber defence, or incident response function, together with strong knowledge of security operations, threat detection, digital forensics, and recognised incident response frameworks. Experience with SIEM and automated response technologies, security monitoring across cloud and on-premises environments, and the development of SOC performance measures is essential. Relevant professional certifications such as CISSP, CISM, GIAC, or equivalent are desirable. You should be an confident people leader who can develop technical talent, manage priorities during high-pressure incidents, and communicate complex security matters clearly to both technical and non-technical audiences. A proactive, analytical, and collaborative approach is essential, alongside a commitment to continuous improvement and effective risk management.

We are seeking an experienced Lead SOC Manager to oversee the day-to-day operation, performance and continuous improvement of a security operations centre. This is a senior leadership role responsible for directing analysts, coordinating incident response and ensuring that security monitoring capabilities effectively protect critical systems, applications and data. You will establish clear operational priorities, maintain high service standards and act as a trusted point of contact for stakeholders across technology, risk and business functions.

Key responsibilities will include leading and developing a multidisciplinary SOC team, managing shift coverage and workload allocation, and creating a culture of accountability, collaboration and continuous learning. You will oversee the detection, investigation, escalation and resolution of security incidents, ensuring that procedures are consistently followed and lessons learned are incorporated into future improvements. The role will also involve defining and monitoring operational metrics, developing reporting for senior leadership, managing security tooling and supporting the tuning of SIEM, SOAR, endpoint and threat intelligence capabilities. You will contribute to incident response exercises, threat hunting, vulnerability management and the development of playbooks, processes and governance controls.

The successful candidate will have significant experience managing a SOC or comparable cyber security operations function, together with a strong understanding of security monitoring, incident response, threat detection and operational risk management. Experience leading technical teams in a complex environment and working with internal and external stakeholders is essential. You should be confident making decisions during high-pressure incidents, communicating clearly with both technical and non-technical audiences, and using data to drive service improvements. Relevant professional certifications such as CISSP, CISM, GIAC, or equivalent are desirable. A practical, strategic and people-focused approach, along with a commitment to maintaining current knowledge of emerging threats and industry best practice, will be highly valued.

We are seeking an experienced Lead SOC Manager to oversee the effective operation and continuous development of a Security Operations Centre. This role will provide strategic direction and hands-on leadership across cyber defence, incident response, threat monitoring and security event management. You will lead a team of security analysts and engineers, ensuring 24/7 monitoring capabilities, consistent operational standards and timely responses to potential threats. The successful candidate will act as a senior point of escalation during significant incidents and will work closely with technology, risk, compliance and business stakeholders to strengthen the organisation’s security posture.

Key responsibilities will include managing SOC processes, procedures and service performance; developing and maintaining incident response, threat detection and vulnerability management capabilities; and improving the use of SIEM, SOAR, EDR and other security technologies. You will establish and monitor operational metrics, service-level objectives and reporting for senior leadership, while identifying opportunities to automate processes and improve detection quality. The role will also involve coordinating investigations, leading post-incident reviews, overseeing third-party security service providers and ensuring that controls align with relevant legal, regulatory and industry requirements. You will support security exercises, threat-hunting initiatives, audit activity and the ongoing development of resilience and response plans.

Applicants should have substantial experience managing a SOC, cyber defence function or similarly complex security operations environment, together with a strong understanding of security monitoring, incident response, threat intelligence and risk management. Experience leading technical teams, managing suppliers and delivering operational change is essential. Professional qualifications such as CISSP, CISM, GIAC or equivalent are desirable, as is familiarity with recognised frameworks including NIST, MITRE ATT&CK and ISO 27001. Strong communication, stakeholder management and decision-making skills are required, along with the ability to remain calm and effective during high-pressure incidents. This is an opportunity to shape a mature security capability and make a measurable impact on organisational resilience.

We are seeking a Cyber Monitoring Advisor to support the ongoing protection of digital services, systems and information. This role will involve monitoring security events, identifying potential threats and helping to ensure that suspicious activity is investigated and managed promptly. You will work closely with technical teams and wider stakeholders to assess risks, respond to incidents and contribute to the continuous improvement of cyber security monitoring and response capabilities.

Key responsibilities will include reviewing alerts from security monitoring tools, analysing logs and event data, escalating incidents in line with established procedures and maintaining accurate records of investigations. You will help identify patterns of malicious or unusual activity, support incident response activity and contribute to post-incident reviews. The role will also involve producing clear reports and briefings, assisting with vulnerability and threat assessments, and helping to develop practical improvements to monitoring processes, controls and guidance. You may be required to participate in an out-of-hours or on-call rota.

Applicants should have practical experience in cyber security monitoring, security operations, incident response or a closely related area. You will need an understanding of common cyber threats, attack techniques, network and system security, and the use of security information and event management tools. Experience of analysing logs, investigating alerts and working with ticketing or case-management systems would be highly desirable. Strong analytical and problem-solving skills are essential, together with the ability to communicate technical findings clearly to both technical and non-technical audiences. A methodical approach, sound judgement and a commitment to confidentiality are also important. Relevant professional qualifications or certifications in cyber security would be advantageous. The salary is £35,379 per annum, plus benefits.

We are seeking an experienced Team Manager – Security Operations to lead and develop a high-performing security operations function. In this role, you will oversee day-to-day security monitoring, incident response and operational assurance, ensuring that threats are identified, assessed and addressed promptly. You will provide clear direction to security analysts and operational teams, manage workloads and priorities, and promote a culture of continuous improvement, collaboration and accountability.

Your responsibilities will include coordinating the response to security incidents, reviewing alerts and investigations, monitoring service performance, and ensuring that operational processes align with relevant policies, standards and regulatory requirements. You will establish and maintain effective procedures for incident management, threat detection, vulnerability remediation, access control and security reporting. The role will also involve producing management information, identifying trends and risks, supporting audits, and communicating security matters clearly to technical and non-technical stakeholders. You will work closely with technology, risk, compliance and business teams to strengthen resilience and ensure that security operations support organisational objectives.

Applicants should have significant experience in security operations, incident response or a related cyber security environment, including experience leading, coaching or managing a team. Strong knowledge of security monitoring principles, SIEM platforms, threat intelligence, vulnerability management and incident handling is expected. Experience with security frameworks such as ISO 27001, NIST or CIS would be advantageous, as would relevant professional certifications. You will need excellent analytical, decision-making and communication skills, together with the ability to remain calm and effective during high-pressure incidents. A proactive leadership style, strong stakeholder management capability and a commitment to developing people and improving operational maturity are essential.