Cyber Defence & Incident Response Leader

Quadient; Greater London; Hybrid; GBP 110,000 - 150,000; Full time

Benefits offered by this job

Hybrid work model

Flexible working hours

Job summary

Quadient seeks a strategic Head of Cyber Defence & Incident Response to own the organisation’s cyber defence across hybrid environments, ensuring robust monitoring, detection and recovery.

Reporting to the CISO, you will lead cyber defence operations (including the MSSP) and drive vulnerability and threat management with threat intelligence. Strong leadership and clear communication in English are essential.

Qualifications

• Strong experience leading cyber defence/SOC and incident response.
• Hands-on understanding of SIEM, SOAR, EDR/XDR, NDR, email security, log pipelines.
• Proven experience managing an MSSP or outsourced SOC capability, including SLAs/KPIs.
• Experience defending hybrid environments (on‑prem and cloud).
• Fluent in English – excellent written and verbal communication.
• Certifications such as GCIH, GCIA, GNFA, CISSP, CISM.
• Experience with threat hunting and MITRE ATT&CK for detections.

Responsibilities

• Own the incident response lifecycle and playbooks; coordinate response.
• Lead and coordinate incident response; act as incident commander when needed.
• Manage MSSP relationship end‑to‑end, including governance and SLAs.
• Drive threat management and operationalise threat intelligence.
• Define and report cyber defence metrics to senior leadership.
• Lead post‑incident reviews and drive improvements.

Skills

Cyber defence leadership

Incident response

SIEM & SOAR

MSSP management

Threat intelligence

Cloud security

Communication skills

Tabletop exercises

Education

Certifications: CISSP

GCIH/GCIA

CISM

Tools

SIEM (Splunk)

SOAR

EDR/XDR

NDR

Cloud security tools (AWS/Azure)

MSSP management tools

Job description

Quadient seeks a strategic Head of Cyber Defence & Incident Response to own the organisation’s cyber defence across hybrid environments, ensuring robust monitoring, detection and recovery.

Reporting to the CISO, you will lead cyber defence operations (including the MSSP) and drive vulnerability and threat management with threat intelligence. Strong leadership and clear communication in English are essential.