Cyber SOC Lead

Skills Development Scotland; Glasgow; Hybrid; GBP 70,000 - 100,000; Full time

Job summary

Skills Development Scotland is seeking an experienced SOC Lead to head security operations across Scotland. You will manage a team of analysts, coordinate major incidents, and shape incident response across a public sector partnership that spans several organisations and thousands of users.

You will drive the evolution of our SOC, work with Microsoft Sentinel/Defender/Entra ID, and influence cybersecurity strategy and risk management while operating with a hybrid working model and a strong focus

Qualifications

• Extensive experience in security operations, threat detection and incident response.
• Proven leadership experience or readiness to step into a SOC leadership role.
• Knowledge of Microsoft security technologies including Sentinel and Defender.
• Experience working with managed security service providers.
• Demonstrable professional experience equivalent to SCQF Level 9 in Cyber Security or related discipline.

Responsibilities

• Lead and develop the Security Operations Centre and analysts.
• Coordinate major cyber incidents and investigations.
• Collaborate with the managed SOC provider to enhance capabilities.
• Improve detection, monitoring and response processes.
• Influence cyber security strategy and risk management across the partnership.
• Direct cyber exercises and continuous improvement initiatives.

Skills

Security Operations

Threat Detection

Incident Response

Leadership

Stakeholder Management

Cyber Security

Education

SCQF Level 9 in Cyber Security / Information Security / CS

Tools

Microsoft Sentinel

Defender

Entra ID

Purview

Intune

Security Copilot

Job description

Lead the defence of critical public services across Scotland.

This isn't a typical SOC leadership role.

As SOC Lead, you'll lead security operations across a unique public sector partnership, protecting multiple organisations, thousands of users, and services that support skills, careers and economic development across Scotland.

You'll drive the evolution of our Security Operations Centre, lead a team of analysts, shape incident response capabilities, and help define cyber security strategy across the partnership. Working with technologies including Microsoft Sentinel, Defender, Entra ID, Purview, Intune and Security Copilot, you'll be at the forefront of modern cyber defence.

What you'll do

• Lead and develop our Security Operations Centre and cyber security analysts.
• Manage and coordinate major cyber incidents and investigations.
• Work closely with our managed SOC provider to enhance security capabilities.
• Improve threat detection, monitoring and response processes.
• Influence cyber security strategy and risk management across the partnership.
• Lead cyber exercises, continuous improvement initiatives and service innovation.
• Translate technical risks into clear business-focused recommendations.

What we're looking for

We're looking for an experienced cyber security professional who combines technical expertise with strong leadership skills.

You may already be leading a SOC team, or you could be a senior cyber security specialist ready to take the next step into leadership.

You'll bring:

• Strong experience in security operations, threat detection and incident response.
• Experience leading, mentoring or developing cyber security professionals.
• Knowledge of Microsoft security technologies, including Sentinel and Defender.
• Experience working with managed security service providers.
• Excellent stakeholder management and communication skills.
• Demonstrable professional experience equivalent to SCQF Level 9 in Cyber Security, Information Security, Computer Science or a related discipline.

Professional certifications such as CISSP, CISM, BTL2 or GIAC are advantageous.

At SDS, you'll have the opportunity to protect services that make a real difference to people, businesses and communities across Scotland.

You'll join an organisation that values collaboration, innovation and continuous improvement, with flexible hybrid working, excellent benefits and a strong commitment to employee wellbeing and development.

Location

This role can be based at any SDS office location across Scotland, with occasional travel to Glasgow. Hybrid working applies.