Cyber Security Operations Lead

JR United Kingdom; Swindon; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A public sector organization is seeking a Cyber Security Operations Lead for a contract role based in Edinburgh, with potential home working. Responsibilities include enhancing security monitoring, leading incident responses, and mentoring colleagues. Required qualifications include relevant Microsoft Certifications and experience with various cybersecurity tools.

Qualifications

• Experience with security monitoring and incident response.
• Recent experience in technical escalation during significant incidents.
• Hands-on involvement in security processes and tool improvements.

Responsibilities

• Lead improvements in security monitoring and vulnerability scanning.
• Design procedures for vulnerability data gathering.
• Communicate technical issues effectively to users and management.

Skills

Vulnerability Scanning

Cyber Threat Analysis

Incident Response

Security Monitoring

Data Collection Methods

Collaboration

Education

Microsoft on-premise and cloud engineering certifications

SANS or equivalent security operations certifications

Tools

Qualys

M365 Defender

Sentinel

Fortinet

Power Platform

Job description

Social network you want to login/join with:

Cyber Security Operations Lead, Swindon, Wiltshire

Client: Venesky Brown

Location: Swindon, Wiltshire, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views:

2

Posted:

06.06.2025

Expiry Date:

21.07.2025

Job Description:

Venesky-Brown’s client, a public sector organisation in Edinburgh, is currently looking to recruit a Cyber Security Operations Lead for an initial 12-month contract at a rate of £525-£575/day (Outside IR35). This role will be based in Edinburgh, with home working considered subject to attendance where needed.

Responsibilities:

• Apply understanding of digital systems and attack frameworks to practical scenarios.
• Stay informed about the current cyber threat landscape and industry best practices.
• Lead improvements in security monitoring and vulnerability scanning coverage and depth.
• Design procedures for vulnerability data gathering and prioritisation.
• Act as a technical escalation point for analysts during significant incidents and investigations, including hands-on involvement.
• Establish procedures for intelligence ingestion and threat hunting.
• Collaborate with architects to ensure smooth handover to SecOps during new service launches.
• Recommend and implement improvements to SecOps processes and tools, including automation.
• Design security KPIs, SecOps management reporting, and data collection methods.
• Ensure accurate delivery of all SecOps-related product evidence.
• Improve security monitoring and vulnerability detection services, including prioritisation and reporting.
• Communicate technical issues effectively with users and senior management.
• Possess recent incident response experience.
• Work effectively in small teams with internal colleagues and external suppliers.
• Take ownership and oversee organization-wide protective responsibilities.
• Share knowledge and mentor analysts.
• Experience with Qualys, M365 Defender, Sentinel, Fortinet, Power Platform.
• Hold Microsoft on-premise and cloud engineering certifications.
• Possess SANS or equivalent security operations certifications.

If you're interested in this opportunity, please get in touch.