Cyber Security Operations Lead

JR United Kingdom; Worcester; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A public sector organisation is seeking a Cyber Security Operations Lead on a 12-month contract based in Edinburgh, with remote working options. This role requires leading security improvements and handling incidents, requiring certifications in engineering and security operations. Candidates with a strong background in cybersecurity practices and tools such as Qualys and M365 Defender are encouraged to apply.

Qualifications

• Experience leading improvements in security monitoring.
• Recent incident response experience is required.
• Understanding of digital systems and attack frameworks.

Responsibilities

• Lead improvements in security monitoring and vulnerability scanning.
• Establish procedures for intelligence ingestion and threat hunting.
• Communicate technical issues with users and management.

Skills

Incident response experience

Threat hunting

Vulnerability detection services

Education

Microsoft on-premise and cloud engineering certifications

SANS or similar security operations certifications

Tools

Qualys

M365 Defender

Sentinel

Fortinet

Power Platform

Job description

Social network you want to login/join with:

Cyber Security Operations Lead, Worcester

Client: Venesky Brown

Location: Worcester, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views: 2

Posted: 06.06.2025

Expiry Date: 21.07.2025

Job Description:

Venesky-Brown’s client, a public sector organisation in Edinburgh, is currently looking to recruit a Cyber Security Operations Lead for an initial 12-month contract at a rate of £525-£575/day (Outside IR35). The role will be based in Edinburgh, with home working considered subject to attendance where needed.

Responsibilities:

• Apply understanding of digital systems and attack frameworks to practice.
• Stay informed of the current cyber threat landscape and industry best practices.
• Lead improvements in security monitoring and vulnerability scanning coverage and depth.
• Design procedures for vulnerability data gathering and prioritisation.
• Act as a technical escalation point for analysts during significant incidents and investigations, including hands-on experience.
• Establish procedures for intelligence ingestion and threat hunting.
• Collaborate with architects to ensure smooth handover to SecOps during new service launches.
• Recommend and implement improvements to SecOps processes and tools, including automation.
• Design security KPIs and SecOps management reports, and collect data to support them.
• Ensure accurate completion of all SecOps-related product delivery evidence.
• Improve security monitoring service delivery.
• Enhance vulnerability detection services, prioritise findings, and report on them.
• Communicate technical issues effectively with users and senior management.
• Possess recent incident response experience.
• Work well in small teams with colleagues and suppliers.
• Show ownership and oversee organisation-wide protective responsibilities.
• Share knowledge and mentor analysts.
• Experience with Qualys, M365 Defender, Sentinel, Fortinet, Power Platform.
• Hold Microsoft on-premise and cloud engineering certifications.
• Possess SANS or similar security operations certifications.

If interested, please get in touch for more information.