Cyber Security Operations Lead – Incident Response

Methods Business And Digital Technology; England; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

LinkedIn Learning access

Management development programme

Training opportunities

24/7 employee assistance programme

Flexible working - home working & part

Part-time options

Office social events

Job summary

Methods Business And Digital Technology seeks a Team Lead for Cyber Services to drive security operations, incident response and governance across government client engagements. You will lead a skilled team, coordinate threat analysis, and champion a security-first approach across Shared Service operations.

The role requires strong leadership, regulatory awareness (NIST, ISO27001, Cyber Essentials Plus) and hands-on experience with SIEM/EDR tools, with the ability to mentor junior staff and

Qualifications

• Experience leading cyber operations teams.
• Knowledge of incident response frameworks and threat hunting.
• Familiarity with SIEM, EDR and vulnerability management tools.
• Ability to coordinate across Service Desk, Delivery and technical leads.

Responsibilities

• Lead cyber service operations focusing on SLA attainment, incident response and resolution quality.
• Oversee daily workflow distribution and prioritise threats and escalations.
• Ensure complex cybersecurity issues are escalated appropriately and documented.
• Line manage Cyber Analysts and support professional development.
• Collaborate to develop security playbooks, SOPs and escalation pathways.

Skills

Leadership

Cybersecurity

Incident response

Threat analysis

Security operations

Communication

Stakeholder management

Education

CompTIA Security+

CISSP

Tools

SIEM

EDR

Vulnerability management

Splunk

CrowdStrike

Sentinel

Defender

Job description

Methods Business And Digital Technology seeks a Team Lead for Cyber Services to drive security operations, incident response and governance across government client engagements. You will lead a skilled team, coordinate threat analysis, and champion a security-first approach across Shared Service operations.

The role requires strong leadership, regulatory awareness (NIST, ISO27001, Cyber Essentials Plus) and hands-on experience with SIEM/EDR tools, with the ability to mentor junior staff and