Cyber Security Specialist (Secops / Liverpool)

Michael Page; Liverpool; On-site; GBP 55,000 - 90,000; Full time

Benefits offered by this job

Private healthcare

Life assurance

Hybrid working

Job summary

Michael Page is seeking a security operations professional to monitor, investigate incidents, and analyse threats across the organisation. You will collaborate with external providers to ensure effective monitoring and incident handling.

The role focuses on improving security maturity, incident response, and security awareness initiatives, including phishing simulations and remediation activities, within a hybrid work environment.

Qualifications

• Experience in Security Operations Centre or equivalent cyber security environment.
• Experience investigating security incidents and coordinating response activities.
• Knowledge of cyber threat techniques and mitigation strategies.
• Familiarity with SIEM, IAM, and DLP technologies.
• Knowledge of MITRE ATT&CK framework and detection engineering concepts.

Responsibilities

• Investigate and respond to security incidents escalated via Security Operations.
• Perform detailed security event analysis and threat hunting.
• Collaborate with external security providers for monitoring and incident handling.
• Support cyber incident response as a technical security specialist.
• Analyse security metrics to recommend improvements to controls.

Skills

SOC experience

Incident response

Threat detection

Analytical skills

MITRE ATT&CK knowledge

Education

Degree in Cyber Security

Security certifications ( CISSP / GIAC / CompTIA )

Tools

SIEM

IAM

DLP

Job description

This position focuses on security monitoring, incident investigation, threat analysis, and operational security improvement. The successful candidate will act as a subject matter expert for cyber security operations, supporting both proactive and reactive security activities while helping to enhance the organisation's overall security maturity.

Client Details

Our client is a well-established and respected professional services organisation with a strong national presence and a reputation for delivering high-quality solutions to a broad client base. With ongoing investment in technology and cybersecurity, they are committed to maintaining a secure and resilient environment that supports business growth, innovation, and operational excellence.

Description

• Investigating and responding to security incidents escalated through the Security Operations function.
• Performing detailed security event analysis and identifying potential threats or areas requiring further investigation.
• Working closely with external security service providers to ensure effective monitoring, alert management, and incident handling.
• Supporting cyber incident response activities as a technical security specialist.
• Analysing security metrics and trends, providing recommendations to improve security controls and reduce risk.
• Delivering and managing security awareness initiatives, including phishing simulations and remediation activities.
• Maintaining and optimising security monitoring and protection platforms across the technology estate.
• Conducting security reviews of systems, infrastructure, and operational processes.
• Collaborating with technology and business teams to drive continuous security improvements.
• Ensuring security operations align with relevant regulatory, governance, and industry best practice requirements.
• Contributing to the development and implementation of operational security controls and procedures.

Profile

• Previous experience working within a Security Operations Centre (SOC) or equivalent cyber security environment.
• Demonstrated experience in security operations, cyber defence, incident response, threat detection, or a related security discipline.
• Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies.
• Experience investigating security incidents and coordinating response activities.
• Knowledge of Security Information and Event Management (SIEM), Identity and Access Management (IAM), and Data Loss Prevention (DLP) technologies.
• Good understanding of modern security frameworks, detection engineering concepts, and operational security best practices.
• Experience securing cloud-based and enterprise collaboration environments.
• Familiarity with cyber threat intelligence and attack frameworks such as MITRE ATT&CK.
• Strong analytical and problem-solving skills with the ability to assess security risks effectively.
• A proactive approach to continuous learning and staying current with emerging threats and security trends.

Desirable

• Degree in Cyber Security, Information Technology, Computer Science, or a related discipline.
• Relevant industry certifications such as CISSP, GIAC, CompTIA Security+, SC-200, AZ-500, or equivalent.
• Experience working within regulated or enterprise-scale environments.

Job Offer

• Private healthcare.
• Life assurance.
• hybrid working 3 days in offices (Liverpool, Glasgow, London)
• Ongoing training and professional development opportunities