Global MDR Threat Operations Lead

VulnU; Oxford; On-site; GBP 120,000 - 180,000; Full time

Job summary

Sophos is seeking an experienced MDR Operations leader to drive global 24x7 security operations. You will lead MDR Team Leads and analysts, ensure staffing, and maintain high service standards across regions including APJ.

You will partner with Threat Intelligence, Detection Engineering, Incident Response, and Product teams to improve detection quality and incident outcomes. The role requires strong people leadership, coaching, and communication skills, with a track record in high-volume SOC

Qualifications

• 7+ years in cybersecurity operations or SOC roles, including 2+ years in people leadership.
• Experience leading security operations in a high-volume, customer-facing environment with staffing and SLAs.
• Strong coaching, performance management, and career development capabilities.
• Excellent written and verbal communication for technical and executive audiences.

Responsibilities

• Lead MDR Team Leads and analysts, set expectations, coach, and drive career development.
• Oversee 24x7 MDR delivery across APJ hours with proper staffing and coverage.
• Maintain operational health metrics: demand, capacity, backlog, response times, and risk.
• Collaborate across Threat Intelligence, Detection Engineering, Incident Response, Product, and Engineering to improve service.
• Act as senior escalation point for customer-impacting situations and major incidents.
• Ensure follow-the-sun operations with clear handovers and timely escalations.
• Drive improvements through standardization, automation, and process redesign.

Skills

Cybersecurity operations

Managed Detection and Response

Security Operations Center

Incident response

People leadership

Global 24x7 operations

MITRE ATT&CK

Tools

MITRE ATT&CK

Job description

Sophos is seeking an experienced MDR Operations leader to drive global 24x7 security operations. You will lead MDR Team Leads and analysts, ensure staffing, and maintain high service standards across regions including APJ.

You will partner with Threat Intelligence, Detection Engineering, Incident Response, and Product teams to improve detection quality and incident outcomes. The role requires strong people leadership, coaching, and communication skills, with a track record in high-volume SOC