EMEA CSOC Lead

1120 NG UK Limited.; Cheltenham; Hybrid; GBP 52,000 - 77,000; Full time

Benefits offered by this job

Flexible working options

Private healthcare

Pension

Holiday buy and sell

Career development

Job summary

Northrop Grumman UK is seeking an EMEA CSOC Lead to oversee cyber security operations across the region. The role includes mentoring a team, incident response leadership, and coordinating remediation efforts.

You will work with SIEM/EDR platforms, perform threat hunting and forensics, and communicate risk to executives. The position requires UK security clearance or eligibility, hybrid work in Cheltenham (3 days onsite), and a salary range of £52,000–£77,000.

Qualifications

• Experience leading a Security Operations Centre (SOC) or CSOC.
• Proven track record leading teams, projects or cyber security functions.
• Strong incident response, threat hunting and digital forensics expertise.
• Experience using commercial SIEM, EDR and network analysis platforms.
• Understanding of OSI model network protocols and traffic analysis.
• Experience with cyber threat intelligence methodologies and frameworks.
• Ability to communicate complex issues to executives and non-technical audiences.

Responsibilities

• Lead, mentor and develop a team of cyber threat analysts with day-to-day oversight.
• Manage security operations across the EMEA region with effective monitoring and response.
• Act as Incident Response Lead for major cyber security events and coordinate containment.
• Lead advanced threat hunting and digital forensics investigations using SIEM/EDR/tools.
• Collaborate with global CSOC teams to improve defence capabilities and processes.
• Provide clear cyber risk updates and executive briefings to leadership teams.

Skills

SOC leadership

Incident response

Threat hunting

Digital forensics

Executive communication

Windows/Unix/Linux

PowerShell

Bash

Tools

SIEM

EDR

Network analysis

Job description

UK CITIZENSHIP REQUIRED FOR THIS POSITION: Yes RELOCATION ASSISTANCE: Relocation assistance may be available TRAVEL: Yes, 10% of the Time EMEA CSOC Lead Location: Cheltenham (hybrid, 3 days onsite) Clearance Type: Must hold or be able to obtain and maintain the highest levels of UK Security Clearance Salary: £52,000 - £77,000

What's your possible? At Northrop Grumman UK, you are part of a team driving innovation where it matters most, solving tomorrow's challenges and shaping the technology solutions of the future. We call it Defining Possible. This mindset goes beyond our customer solutions. It is the foundation for your career development and the impact we have within the community. This is more than just a job. It's a mission.

What You'll Do

• Lead, mentor and develop a team of cyber threat analysts, providing direction, coaching and day-to-day operational oversight.
• Manage security operations across the EMEA region, ensuring effective execution of cyber monitoring, triage, investigation and response activities.
• Serve as Incident Response Lead for major cyber security events, coordinating technical investigations, containment and remediation activities.
• Lead advanced threat hunting and digital forensic investigations using SIEM, EDR, network telemetry and threat intelligence sources.
• Work closely with global CSOC teams to improve cyber defence capabilities, operational processes and detection methodologies.
• Provide clear and actionable cyber risk updates, technical briefings and executive summaries to senior stakeholders and leadership teams.
• Represent Northrop Grumman UK within government, industry and security forums, supporting collaboration and information sharing.
• Drive cyber resilience through exercises, lessons learned activities and continuous improvement initiatives.

What We're Looking For

Essential Experience

• Experience leading or managing a Security Operations Centre (SOC) or Cyber Security Operations Centre (CSOC).
• Proven success leading teams, projects or operational cyber security functions.
• Strong incident response, cyber threat hunting and digital forensics expertise.
• Experience using commercial SIEM, EDR and network analysis platforms.
• Strong understanding of network protocols and traffic analysis across the OSI model.
• Experience working with cyber threat intelligence methodologies and frameworks.
• Ability to communicate complex technical issues clearly to executive and non-technical audiences.
• Strong stakeholder management, decision-making and problem-solving skills.
• Proficiency across Windows, Linux and Unix environments, including PowerShell and Bash scripting.

Desirable Experience

• Existing trusted relationship with the UK National Cyber Security Centre (NCSC).
• Experience operating within highly regulated, defence or high-classification environments.
• Familiarity with NCSC CAF, DEFSTAN, DCC and similar national security frameworks.
• Experience assessing and responding to sophisticated nation-state and cyber espionage activity.
• Relevant technical certifications such as GCIH, GCIA, GCFA, CEH or equivalent.
• Bachelor's degree or higher in Cyber Security, Computer Science or a related discipline.

Benefits

• Flexible working options, including hybrid arrangements and compressed fortnights with every other Friday off
• Private healthcare, dental cover, life assurance and pension
• Flexible benefits package including critical illness cover and health cash plan
• Holiday buy and sell scheme
• Career development and learning programmes
• Annual performance incentive programme

Why Join Northrop Grumman UK?

A Mission to Believe In Every day we contribute to building a more secure and connected world. You'll work alongside some of the best cyber security professionals in the industry, defending critical technologies and supporting missions that matter. You'll also have opportunities to engage with employee networks, STEM programmes and community initiatives that make a positive impact beyond the workplace.

A Place to Belong and Thrive

We know that innovation comes from diverse experiences, perspectives and backgrounds. Every voice matters, and we're committed to creating an environment where everyone can contribute, grow and succeed.

Your Career, Your Way

Whether your ambition is to deepen your technical expertise, develop as a leader or influence cyber security strategy on a global scale, we'll provide the support, mentoring and development opportunities to help you achieve your goals.

Security Clearance

Security Clearance Due to the nature of our work, you must be a UK national and able to gain and maintain UK Government security clearance in line with the job role and requirements. Our recruitment team is on hand to answer any questions and will guide you through the process: [e-mail]

Northrop Grumman is committed to hiring and retaining a diverse workforce, and encourages individuals from all backgrounds and all abilities to apply and consider becoming a part of our diverse and inclusive workforce.

We are a pioneering company. With careers across all areas: air, cyber, land, sea and space – our 90,000 employees work as one to defend and define the future. Northrop Grumman careers and internships are as varied as your interests, with a lifetime of potential that will give you every opportunity to do your best work. Working together with people from many backgrounds, personal passions and disciplines, we share a drive to push the boundaries of science, technology and engineering to meet the ever evolving needs of our customers worldwide.