Cyber Security Operations Lead

JR United Kingdom; Stoke-on-Trent; On-site; GBP 80,000 - 100,000; Full time

Job summary

A public sector organization is seeking a Cyber Security Operations Lead for a 12-month contract. This role involves leading improvements in security practices, incident response, and mentoring junior analysts, with home working options considered. Candidates must hold relevant certifications and have hands-on experience with recognized security tools.

Qualifications

• Experience leading security monitoring improvements and incident response.
• Hold Microsoft on-premise and cloud engineering certifications.
• Possess SANS or similar security operations certifications.

Responsibilities

• Lead improvements in security monitoring and vulnerability scanning.
• Design procedures for vulnerability data gathering and threat hunting.
• Act as a technical escalation point for significant incidents.

Skills

Incident response

Threat hunting

Security monitoring

Vulnerability scanning

Cloud security

Collaboration

Education

Microsoft certification

SANS or similar security certification

Tools

Qualys

M365 Defender

Sentinel

Fortinet

Power Platform

Job description

Social network you want to login/join with:

Cyber Security Operations Lead, Stoke-on-Trent

Client: Venesky Brown

Location: Stoke-on-Trent, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views:

2

Posted:

06.06.2025

Expiry Date:

21.07.2025

Job Description:

Venesky-Brown’s client, a public sector organisation in Edinburgh, is currently looking to recruit a Cyber Security Operations Lead for an initial 12-month contract at a rate of £525-£575/day (Outside IR35). This role will be based in Edinburgh, with home working considered subject to attendance where needed.

Responsibilities:

• Apply understanding of digital systems and attack frameworks to practice.
• Stay informed about the current cyber threat landscape and industry best practices and standards.
• Lead improvements in security monitoring and vulnerability scanning coverage and depth.
• Design procedures for vulnerability data gathering and prioritisation.
• Act as a technical escalation point for analysts on significant incidents, including hands-on experience.
• Establish procedures for intelligence ingestion and threat hunting.
• Work with architects to ensure smooth handover to SecOps during new service launches.
• Recommend and implement improvements to SecOps processes and tools, including automation.
• Design security KPIs and SecOps management reporting, and gather supporting data.
• Ensure accurate completion of all SecOps-related product delivery evidence.
• Improve security monitoring service delivery.
• Enhance vulnerability detection, prioritisation, and reporting.
• Communicate technical issues effectively with users and senior managers.
• Recent experience in incident response.
• Work well within small teams, collaborating with colleagues and suppliers.
• Take ownership and oversee organisation-wide protective responsibilities.
• Share knowledge and mentor analysts.
• Experience with Qualys, M365 Defender, Sentinel, Fortinet, Power Platform.
• Hold Microsoft on-premise and cloud engineering certifications.
• Possess SANS or similar security operations certifications.

If you are interested in this opportunity, please get in touch.