Cyber Security Operations Lead (Hybrid)

Nominet; Oxford; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Early Finish Friday

30 days annual leave

Private healthcare

Pension scheme

EV scheme

Rewards platform

Medicash discounts

Annual company bonus

Job summary

Nominet is seeking a Cyber Security Operations Manager in the UK, hybrid with Oxford presence. You will lead daily security operations, oversee monitoring, incident response and vulnerability management, and direct a small team of analysts.

You will manage a SOC/MSSP, improve detection and response capabilities, and drive automation and playbooks to reduce manual effort while maintaining rigorous human oversight.

Qualifications

• Substantial experience in security operations, detection and response, including leading significant incidents.

Responsibilities

• Lead monitoring, detection, triage, escalation and incident response. Act as incident commander for material cyber incidents, from containment through recovery, communications and lessons learned.
• Own and exercise incident response plans and playbooks for critical services, cloud, identity, endpoints, suppliers and data compromise.
• Manage and challenge the SOC/MSSP on alert quality, triage, escalation and improvements in detection and response.
• Improve the tooling, logging, detection rules and response workflows across SIEM, EDR/XDR, cloud, identity and vulnerability management.
• Introduce automation and MITRE ATT&CK/NIST driven improvements to detection and triage.
• Prioritise vulnerabilities with clear risk owners and track through treatment and closure.
• Lead analysts, report to the CISO and senior stakeholders, and deputise for the CISO when required.

Skills

Security operations

Incident response

SOC management

Threat detection

Security telemetry

SIEM/EDR

Cloud security

Risk-based prioritisation

Stakeholder communication

Team leadership

Job description

Nominet is seeking a Cyber Security Operations Manager in the UK, hybrid with Oxford presence. You will lead daily security operations, oversee monitoring, incident response and vulnerability management, and direct a small team of analysts.

You will manage a SOC/MSSP, improve detection and response capabilities, and drive automation and playbooks to reduce manual effort while maintaining rigorous human oversight.