Cyber SOC Lead Ref No: 3594

Skills Development Scotland; Glasgow; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Flexible working

Wellbeing program

Job summary

Skills Development Scotland (SDS) is seeking a SOC Lead to drive the maturity of the Security Operations Centre across a public sector partnership in Scotland.

You’ll lead analysts, shape incident response capabilities, and influence cyber security strategy using Microsoft Sentinel, Defender, Entra ID, Intune and related tools. Hybrid working from Scotland with occasional travel to Glasgow.

Qualifications

• Demonstrable professional experience equivalent to SCQF Level 9 in Cyber Security, Information Security, Computer Science or a related discipline.
• Experience leading a SOC and driving incident response maturity within a public sector context.
• Professional certifications such as CISSP, CISM or BT L2; GIAC certifications are a plus.
• Ability to influence stakeholders and translate cyber risks into business decisions.

Responsibilities

• Lead a Security Operations Centre and a team of analysts, partnering with a managed SOC provider.
• Direct threat detection, investigations, and incident response across multiple organisations.
• Shape security operations delivery, resilience and incident playbooks for a public sector partnership.
• Lead major exercises, vendor challenges and ongoing security improvements across the estate.
• Turn insights into action using Microsoft Sentinel, Defender, Entra ID, Intune, Purview and Security Copilot.

Skills

Security operations

Incident response

Cyber investigations

Team leadership

Stakeholder communication

Managed security services

Security strategy

Education

SCQF Level 9 in Cyber Security/Info Security/CS

Tools

Microsoft Sentinel

Microsoft Defender

Entra ID

Intune

Purview

Security Copilot

Job description

If you require this advert in another format, please [e-mail] or call 0300 013 5119.

About Us

This isn't a typical SOC leadership role. You'll lead security operations across a unique public sector partnership, protecting multiple organisations, thousands of users and services that support economic development, skills and careers across Scotland.

As part of Enterprise Information Services (EIS), you'll be responsible for driving the maturity of our Security Operations Centre, leading a team of analysts, shaping incident response capabilities and influencing cyber security strategy across the partnership. You'll work at the forefront of cyber defence, using technologies such as Microsoft Sentinel, Defender, Entra ID and Security Copilot to strengthen our ability to identify, respond to and learn from emerging threats.

Be part of something bigger - build skills, change lives!

What You’ll Be Doing

This is your opportunity to lead and evolve a Security Operations Centre that protects critical public services used by thousands of people across Scotland.

As SOC Lead, you'll be at the forefront of cyber defence, leading a team of analysts and working with our managed SOC provider to detect, investigate and respond to threats. You'll shape how security operations are delivered across a unique public sector partnership, driving innovation, strengthening resilience and ensuring we're ready to respond to an ever-changing threat landscape.

Using technologies including Microsoft Sentinel, Defender, Entra ID, Intune, Purview and Security Copilot, you'll turn insight into action, improve detection capabilities and help build a modern, intelligence-led security operation. You'll lead major incident response activities, challenge and influence suppliers, run cyber exercises, and help define what great security operations looks like for the future.

This is more than a SOC leadership role. It's a chance to shape strategy, influence decision-making, and make a visible impact on the security of organisations that support skills, careers and economic development across Scotland.

What We’re Looking For

We're looking for a passionate cyber security professional who combines strong technical expertise with the ability to lead, inspire and drive change.

You may already be leading a SOC team, or you could be a senior cyber specialist ready to take the next step into leadership. Either way, you'll be someone who thrives on solving complex challenges, continuously improving services and helping others develop.

You’ll bring experience in security operations, incident response and cyber investigations, along with the confidence to lead during high-pressure situations and communicate effectively with both technical and non-technical audiences.

You’ll stand out if you have:

• Strong experience in security operations, threat detection and incident response.
• Experience leading, mentoring or developing cyber security professionals.
• Knowledge of the Microsoft security ecosystem, including Sentinel and Defender.
• Experience working with managed security service providers or outsourced SOC services.
• A proactive mindset, focused on continuous improvement and innovation.
• The ability to influence stakeholders and translate technical risks into business-focused decisions.
• Demonstrable professional experience equivalent to SCQF Level 9 in Cyber Security, Information Security, Computer Science or a related discipline
• Professional certifications such as Blue Team Level 2 (BTL2), CISSP, CISM or highly desirable, with GIAC certifications an added advantage.

Above all, we're looking for someone who wants to make a difference. Someone who is excited by the challenge of protecting critical services, developing people and helping shape the future of cyber security across a unique partnership of public sector organisations.

About SDS

Skills Development Scotland (SDS) is Scotland’s national skills agency, focused on driving productivity and inclusive economic growth by investing in skills and supporting people and businesses to reach their full potential. Through deep partnership working, expert insights and innovative solutions, SDS helps address Scotland’s skills and labour-market challenges, ensuring employers can access the talent they need while individuals gain opportunities to develop and thrive. SDS is guided by strong organisational values, placing customers at the heart of everything it does and fostering a culture of collaboration, continuous improvement and respect.

Our Values

Our organisational values are created by our colleagues and are the compass that guide our behaviours and actions with our customers and each other. We need our future colleagues to share these values and help us to continue to deliver our bold ambitions for the future;

• We put the needs of our customers at the heart of all we do
• We make use of our combined strengths and expertise to deliver the best outcomes
• We demonstrate self-motivation, personal responsibility, and respect
• We continually improve to achieve excellence

Why You’ll Love Working Here

SDS is an award-winning, equal opportunities and fair work employer where our culture is driven by our people. The values we share guide how we support our customers—the people of Scotland—and how we support one another. With progressive benefits, flexible ways of working, and a strong focus on wellbeing, engagement, and development, we’re proud to be a great place to work.

Where You’ll be Working

This role can be located at any SDS location, although occasional travel to Glasgow offices will be required. SDS works to a hybrid working model, therefore the successful candidate will be expected to work from both home and an SDS workplace on a regular basis. We are happy to discuss this with candidates at interview.

Using AI

AI can be a useful tool for drafting or polishing your application. Please remember to check that everything you submit is accurate and genuinely represents your skills, experience and voice. We value authenticity and want to hear your real story.

One Last (but very important) Thing

At SDS, we are committed to equality, diversity and inclusion. If you have the right skills for the job, we want to hear from you. We welcome applications from candidates regardless of age, disability, gender identity, sexual orientation, religion, belief or race. While we want to know about your relevant skills and experience, please avoid disclosing any identifying characteristics.

To help you prepare and perform at your best, SDS shares interview questions with all candidates in advance. This removes unnecessary barriers, supports those who benefit from additional preparation time, and helps ensure a fair and transparent recruitment process. This approach is being trialled for 6 months from April 2026.

To find out more about working at SDS and our application process, please visit https://www.skillsdevelopmentscotland.co.uk/work-with-us/

Internal applicants should discuss their application with their People Manager prior to applying for this post.