Global Security Operations Lead

La Fosse; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

La Fosse in London is seeking a Security Operations Manager to lead end-to-end security operations, including the SOC, incident response, detection engineering, and threat intelligence. The role requires a hands-on, technical leader who can manage incident bridges and drive a global security program.

You will own the operating model, tooling, metrics, and people behind security operations, with proven experience in building or rebuilding SOCs and strong cloud security across AWS, GCP, and Azure.

Qualifications

• Led the response to serious cyber incidents.
• Built or rebuilt SOC—operating model, staffing, tooling, metrics.
• Strong cloud security background across AWS, GCP, and Azure.
• Led detection programmes: rule development, coverage mapping, tuning, automation.
• Experience with threat hunting and purple teaming.

Responsibilities

• Oversee the global Security Operations function end-to-end, including SOC, IR, detection, and threat intel.
• Lead the incident bridge and coordinate cross-team response during major cyber incidents.
• Define operating model, staffing, tooling, and metrics for security operations.
• Drive hiring, training, and career development within the SOC.
• Continuously improve detection coverage and incident response processes across cloud environments.

Skills

Leadership

Incident response

SOC management

Threat intelligence

Detection engineering

Cloud security

IAM / Logging

Purple teaming

Threat hunting

Tools

AWS

GCP

Azure

Job description

La Fosse in London is seeking a Security Operations Manager to lead end-to-end security operations, including the SOC, incident response, detection engineering, and threat intelligence. The role requires a hands-on, technical leader who can manage incident bridges and drive a global security program.

You will own the operating model, tooling, metrics, and people behind security operations, with proven experience in building or rebuilding SOCs and strong cloud security across AWS, GCP, and Azure.