Security Operations Lead - Threat Detection and Response

Security Operations Lead – Threat Detection & Response

London | Hybrid | Up to £80k + excellent benefits

I'm working with a leading London university to appoint a Security Operations Lead to lead its Threat Detection & Response (TDR) function within the wider Security Operations team.

This is a senior cyber security leadership role with responsibility for continuous monitoring, alert triage, security investigations and incident response, alongside leading a team of security specialists and junior staff.

You'll also play a key role in developing the university's security operations capability – improving people, processes, tooling, metrics and incident response playbooks, while ensuring the organisation is prepared to respond effectively to cyber incidents.

The ideal candidate will have:

• Experience leading or managing a SOC, Security Operations, Detection & Response or Incident Response function
• Strong knowledge of security monitoring, alert triage, investigations and incident response
• Experience with technologies such as SIEM, SOAR, EDR, NDR, identity protection and cloud security tooling
• Experience developing incident response plans, playbooks, runbooks and exercises
• Strong people leadership skills, with experience developing technical teams
• The ability to remain calm and make decisive, evidence-based decisions during security incidents
• Strong communication skills and the ability to engage with both technical and senior non-technical stakeholders.