Cyber Security Ops Manager (Hands-on) - Law Firm

Totum Partners; Greater London; Hybrid; GBP 90,000 - 135,000; Full time

Job summary

Totum Partners is seeking an experienced Cyber Security Lead to drive operational delivery of the firm's security function. You will guide detection, response, engineering, and monitoring to protect against cyber threats.

You will lead a security team, mentor staff, and manage priorities while providing escalation support. The role includes threat hunting and overseeing vulnerability management in a hybrid London-based environment.

Qualifications

• 5 years’ relevant cyber security experience in security operations within a law firm environment.
• Proven experience leading a team, including coaching and developing staff, managing priorities and providing technical escalation support.
• Hands-on experience with security controls/tools - SIEM, DLP, SASE, Endpoint, IAM/PAM, Network security - firewalls, Entra ID and Email security within an Azure environment.
• Solid experience managing SOC operations - Detection Engineering, Incident Response, Threat Modelling, Hunting and Threat Intelligence, Vulnerability Management, MITRE ATT&CK Framework and Security Monitoring.
• Excellent communication and stakeholder skills.

Responsibilities

• The role is responsible for the operational delivery of the firms' cyber security function, ensuring that security monitoring, detection, response, engineering and operational security controls effectively protect the Firm from cyber threat.
• Lead the Cyber Security team, including coaching, mentoring and performance management.
• Oversee threat monitoring, detection, investigation and response activities
• Review security architecture and technical designs to ensure alignment with security standards.
• Security Monitoring & Detection Engineering
• Develop and maintain SIEM use cases and detection rules.
• Improve detection content based on emerging threats, incident learnings and threat intelligence.
• Manage the Firm's vulnerability management programme.
• Lead cyber security incident management and response activities.
• Develop proactive threat hunting activities.

Skills

Security operations

Team leadership

Threat hunting

MITRE ATT&CK

Stakeholder communication

Tools

SIEM

DLP

SASE

Endpoint security

IAM/PAM

Firewalls

Entra ID

Email security

Job description

• The role is responsible for the operational delivery of the firms' cyber security function, ensuring that security monitoring, detection, response, engineering and operational security controls effectively protect the Firm from cyber threat.
• Lead the Cyber Security team, including coaching, mentoring and performance management.
• Oversee threat monitoring, detection, investigation and response activities
• Review security architecture and technical designs to ensure alignment with security standards.
• Security Monitoring & Detection Engineering
• Develop and maintain SIEM use cases and detection rules.
• Improve detection content based on emerging threats, incident learnings and threat intelligence.
• Manage the Firm's vulnerability management programme.
• Lead cyber security incident management and response activities.
• Develop proactive threat hunting activities.

Skills Required

• 5 years’ relevant cyber security experience in security operations within a law firm environment.
• Proven experience leading a team, including coaching and developing staff, managing priorities and providing technical escalation support.
• Hands-on experience with security controls/tools - SIEM, DLP, SASE, Endpoint, IAM/PAM, Network security - firewalls, Entra ID and Email security within an Azure environment.
• Solid experience managing SOC operations - Detection Engineering, Incident Response, Threat Modelling, Hunting and Threat Intelligence, Vulnerability Management, MITRE ATT&CK Framework and Security Monitoring.
• Excellent communication and stakeholder skills.

This role offers hybrid working - 2 days WFH weekly.