Cyber Security Manager - Hybrid

Ashdown Group; Hounslow; Hybrid; GBP 70,000 - 92,000; Full time

Job summary

Ashdown Group is seeking an experienced Cyber Security Manager to lead and enhance the cyber security function within a large public sector organisation. This hands-on leadership role combines security operations with strategic oversight, including threat investigation, detection engineering, vulnerability management and security automation.

You will work with Microsoft Sentinel, Defender, Entra ID, Intune, Purview and Copilot for Security, applying practical expertise rather than mere

Qualifications

• Experience leading or improving a SOC or security operations function.
• Hands-on experience with Microsoft Sentinel and Defender suite.
• Strong incident response, threat hunting and vulnerability management.
• Ability to communicate security risks to senior and non-technical audiences.

Responsibilities

• Lead day-to-day cyber security operations and improve SOC capability.
• Investigate incidents from triage to recovery and remediation.
• Develop detection, monitoring and threat-hunting capabilities using Sentinel/Defender.
• Identify vulnerabilities and work with teams on remediation.
• Develop incident response playbooks, automation and security processes.

Skills

SOC leadership

Threat hunting

Incident response

Security monitoring

Security automation

Stakeholder management

Tools

Microsoft Sentinel

Microsoft Defender

Entra ID

Intune

Purview

Copilot for Security

Job description

We are seeking an experienced Cyber Security Manager to lead and strengthen the cyber security function within a large public sector organisation, protecting essential services, client data and business-critical information. This is a hands-on technical leadership role, combining day-to-day security operations with strategic leadership. You will work directly with security technologies, investigate threats and incidents, improve detection and response capabilities, and work closely with technical teams and senior stakeholders. The role is hybrid, with 3 days per week in the organisation's offices in North West London.

A key focus will be the extensive practical use and optimisation of the Microsoft Securityportfolio particularly: Microsoft Sentinel, Microsoft Defender, Entra ID, Intune, Purview and Copilot for Security. You will be expected to work hands-on with these technologies, rather than simply manage their use. This will include security monitoring, alert investigation, threat hunting, detection engineering, vulnerability management and security automation.

Key Responsibilities

Lead on day-to-day cyber security operations and continuously improve the organisation's SOC capability. Investigate and manage security incidents from initial triage through containment, remediation and recovery. Develop and improve threat detection, monitoring and threat-hunting capabilities using Sentinel and Defender. Identify vulnerabilities and security weaknesses and work with technical teams on remediation. Develop incident response playbooks, automation and security processes. Support security architecture and technical design reviews. Provide cyber security leadership and advice to senior management. Manage cyber risk, governance, policies and compliance across the technology estate. Ensure alignment with NCSC guidance, PSN, PCI-DSS, GDPR, Cyber Essentials Plus and recognised security frameworks.

Key skills required

• Proven experience leading or improving a SOC or security operations function.
• Extensive hands-on experience with Microsoft Sentinel and the Defender suite.
• Strong practical experience with Sentinel detection, analytics, alerting and incident investigation.
• Extensive experience investigating and responding to threats using Microsoft Defender.
• Good working knowledge of Entra ID, Intune and Purview, with awareness of Copilot for Security.
• Strong experience in incident response, threat hunting, detection engineering and vulnerability management.
• Strong understanding of modern cyber threats and attack techniques.
• Excellent leadership and stakeholder management skills.
• Ability to operate effectively at both technical and strategic levels, communicating complex security issues clearly to senior and non-technical audiences.
• Strong knowledge of relevant cyber security frameworks, governance and compliance requirements.

This is a genuine opportunity to shape the cyber security strategy for a large, diverse organisation delivering essential services to the local community. The role is offered with a salary range of between £ 70,000 - £92,000p.a. dependant on experience