Cyber Security Operations Lead

JR United Kingdom; Southampton; On-site; GBP 80,000 - 100,000; Full time

Job summary

A public sector organization is seeking a Cyber Security Operations Lead to enhance their cybersecurity measures and oversee the security monitoring service. This role involves collaborating with teams on security improvements, responding to incidents, and utilizing various security tools. Candidates should possess the necessary certifications and experience in cyber operations.

Qualifications

• Experience with vulnerability scanning and design procedures.
• Proven ability to enhance vulnerability detection services.
• Effective in mentoring and sharing knowledge with junior analysts.

Responsibilities

• Lead improvements in security monitoring and vulnerability scanning.
• Establish procedures for threat hunting and intelligence ingestion.
• Manage security monitoring service delivery and improvements.

Skills

Understanding of digital systems

Knowledge of cyber threat landscape

Experience in security monitoring

Incident response experience

Ability to communicate technical issues

Education

Certifications in Microsoft on-premise and cloud engineering levels

SANS or similar security operations certifications

Tools

Qualys

M365 Defender

Sentinel

Fortinet

Power Platform

Job description

Social network you want to login/join with:

Cyber Security Operations Lead, Southampton

Client: Venesky Brown

Location: Southampton, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views:

2

Posted:

06.06.2025

Expiry Date:

21.07.2025

Job Description:

Venesky-Brown’s client, a public sector organisation in Edinburgh, is currently looking to recruit a Cyber Security Operations Lead for an initial 12-month contract at a rate of £525-£575/day (Outside IR35). This role will be based in Edinburgh, with home working considered subject to attendance where needed.

Responsibilities:

• Apply understanding of digital systems and attack frameworks to practice.
• Stay informed about the current cyber threat landscape and industry best practices and standards.
• Lead improvements in security monitoring and vulnerability scanning coverage and depth.
• Design procedures for vulnerability data gathering and prioritisation.
• Act as a technical escalation point for analysts on significant incidents and investigations, including hands-on experience.
• Establish procedures for intelligence ingestion and threat hunting.
• Collaborate with architects to ensure smooth handover to SecOps during new service launches.
• Recommend and implement improvements to SecOps processes and tools, including automation.
• Design security KPIs and SecOps management reports; gather supporting data.
• Ensure the completion and accuracy of all SecOps-related product delivery evidence.
• Manage security monitoring service delivery and ongoing improvements.
• Enhance vulnerability detection services, including prioritisation and reporting.
• Communicate technical issues effectively with users and senior management.
• Possess recent incident response experience.
• Work effectively in small teams with colleagues and suppliers.
• Own protective responsibilities organization-wide, demonstrating ownership and initiative.
• Share knowledge and mentor analysts.
• Experience with Qualys, M365 Defender, Sentinel, Fortinet, Power Platform.
• Certifications in Microsoft on-premise and cloud engineering levels.
• SANS or similar security operations certifications.

If you would like to hear more about this opportunity, please get in touch.