Detection and Automation Lead - Cyber Security

JR United Kingdom; Slough; Hybrid; GBP 95,000 - 129,000; Full time

Job summary

A leading global organisation is seeking a Detection & Automation Lead in cyber security. This hybrid role involves designing scalable detection and automation capabilities within a forward-thinking Security Operations team. The ideal candidate will possess strong SOC engineering experience, excel in a fast-paced environment, and contribute to strategic internal capability expansion.

Benefits

Excellent Benefits

Qualifications

• Experience in SOC engineering, IR automation, or security operations tooling.
• Hands-on experience with integrating and automating various security platforms.
• Ability to define and document workflows, metrics, and operational models.

Responsibilities

• Designing and implementing SOC process automation.
• Integrating security tools (SIEM, SOAR, firewalls, etc.).
• Creating automated playbooks for IR workflows.

Skills

SOC engineering

IR automation

Security operations tooling

Automation of security platforms

Workflow documentation

Job description

Detection & Automation Lead – Cyber Security

Location: Hybrid – West London

Salary: £95,000 + 35% Bonus + Excellent Benefits

We’re hiring a Detection & Automation Lead for a global organisation undergoing major transformation in cyber security. This is a greenfield position for someone who thrives in strategy, engineering, and automation.

As part of a forward-thinking Security Operations team, you’ll play a critical role in designing and implementing scalable detection and response capabilities, integrating with a newly selected MSSP, and laying the groundwork for future internal capability expansion.

Responsibilities include:

• Designing and implementing SOC process automation to reduce manual effort in alert triage, response, and reporting
• Integrating security tools (SIEM, SOAR, firewalls, etc.)
• Creating automated playbooks to ensure consistent and swift IR workflows
• Collaborating with SOC analysts, engineers, and third-party vendors to identify automation opportunities
• Defining SLAs, KPIs, and operational procedures with the MSSP
• Developing a business case for an internal SOC team as part of long-term strategy

Ideal candidate:

• Has experience in SOC engineering, IR automation, or security operations tooling
• Hands-on experience with integrating and automating various security platforms
• Ability to define and document workflows, metrics, and operational models
• Experience working with MSSPs and multi-vendor environments
• Thrives in a fast-paced, collaborative environment with leadership qualities