Cyber Security Operations Lead

JR United Kingdom; Telford; On-site; GBP 80,000 - 100,000; Full time

Job summary

A public sector organisation in Edinburgh is seeking a Cyber Security Operations Lead for a 12-month contract. The role involves enhancing security operations, incident response, and vulnerability management. Ideal candidates will possess strong security certifications, hands-on experience, and excellent communication skills to drive improvements across teams.

Qualifications

• Experience in incident response and security operations.
• Ability to lead technical discussions and improvements.
• Strong skills in vulnerability detection and monitoring.

Responsibilities

• Lead security monitoring and vulnerability scanning improvements.
• Design KPIs for security operations and report on them.
• Mentor and share knowledge with analysts.

Skills

Cyber threat landscape awareness

Security monitoring

Incident response

Vulnerability scanning

Knowledge sharing

Education

Microsoft-related certifications

SANS or similar security operations certifications

Tools

Qualys

M365 Defender

Sentinel

Fortinet

Power Platform

Job description

Social network you want to login/join with:

Venesky-Brown’s client, a public sector organisation in Edinburgh, is currently looking to recruit a Cyber Security Operations Lead for an initial 12 month contract on a rate of £525-£575/day (Outside IR35). This role will be based in Edinburgh - home working will be considered subject to attendance where needed.

Responsibilities:

- Use understanding of digital systems and attack frameworks to apply theory to practice.

- Be aware of the current cyber threat landscape and industry best practices and standards.

- Lead on improvement to coverage and depth of security monitoring and vulnerability scanning

- Design vulnerability data gathering and prioritisation procedures

- Act as technical escalation point for analysts on significant incidents, investigations, including hands on experience

- Establish procedures for intelligence ingestion and threat hunting

- Working with architects and interpreting designs to ensure strong handover to SecOps during new service go live.

- Recommendation and implement improvements to SecOps processes and tools (e.g. automation of workloads)

- Design security KPIs and SecOps management reporting, and the gathering of data in support of them

- Own completion and accuracy of all SecOps-related product delivery evidence

- Security monitoring service delivery and improvement

- Vulnerability detection service improvement, finding prioritisation and reporting.

- Ability to communicate on technical issues with users and senior managers

- Recent experience in incident response

- Ability to work well in small team with internal colleagues and suppliers

- Ability to self-start, accept ownership and oversee organisation wide protective responsibilities

- Ability to share knowledge and experience with colleagues, including mentoring of analysts

- Experience with Qualys, M365 Defender, Sentinel, Fortinet, Power Platform

- Microsoft – on-premise and cloud related engineering level certifications

- SANS or similar security operations certifications

If you would like to hear more about this opportunity please get in touch.