Cyber Defence & Incident Response Lead

Quadient; Greater London; Hybrid; GBP 140,000 - 180,000; Full time

Benefits offered by this job

Hybrid work model

Flexible work options

Global learning platform

Job summary

Quadient is seeking a Head of Cyber Defence and Incident Response to own the organisation's cyber defence across hybrid environments, leading detection, response and recovery with a strong focus on vulnerability and threat management.

The role reports to the CISO and oversees the MSSP, coordinating across IT, engineering, and Legal/Privacy to protect critical data and ensure business continuity. Excellent leadership and English communication required.

Qualifications

• Experience leading cyber defence/SOC and incident response.
• Experience managing an MSSP relationship with SLAs/KPIs and governance.
• Proven experience running vulnerability and threat management programmes, prioritisation based on impact.
• Experience defending hybrid environments (on-prem and cloud).
• Fluent in English, excellent written and verbal communication.

Responsibilities

• Own the incident response lifecycle and develop playbooks and runbooks.
• Lead and coordinate security incidents, acting as incident commander; include stakeholder communications and recovery coordination.
• Manage the MSSP relationship end-to-end: service definitions, SLAs/KPIs, escalation paths, and governance.
• Optimize security monitoring and tooling across SIEM, SOAR, EDR/XDR, NDR, email security with use-case coverage.
• Own the vulnerability management programme (on-prem and cloud) including scanning coverage and SLAs.
• Drive threat management by operationalising threat intelligence into defensive priorities.
• Lead continuous improvement of the defence stack: tune detections, reduce noise, expand automation.
• Establish and run a threat hunting programme with telemetry coverage.
• Run tabletop exercises and simulations; validate roles and procedures.
• Define and report cyber defence metrics to senior leadership.
• Lead post-incident reviews and lessons learned for measurable improvements.
• Support business continuity and crisis management during cyber events.
• Maintain incident response documentation and deliver training.
• Communicate cyber risk clearly to technical and non-technical audiences.

Skills

Cyber defence leadership

Incident response

SIEM/SOAR/EDR/XDR

MSSP management

Vulnerability management

Threat intelligence

Hybrid cloud security

Executive communication

English proficiency

Tools

SIEM

SOAR

EDR/XDR

NDR

Email security

Threat intelligence platforms

Job description

Quadient is seeking a Head of Cyber Defence and Incident Response to own the organisation's cyber defence across hybrid environments, leading detection, response and recovery with a strong focus on vulnerability and threat management.

The role reports to the CISO and oversees the MSSP, coordinating across IT, engineering, and Legal/Privacy to protect critical data and ensure business continuity. Excellent leadership and English communication required.