Global Security Ops Lead: Threat Detection & Response

Cloudflare, Inc.; City of Westminster; On-site; GBP 120,000 - 160,000; Full time

Job summary

Squarepoint is seeking an IT Sec Operations Lead to head global security operations, including threat monitoring, detection and response, incident management, forensic readiness and cyber recovery. The role covers overseeing SOC/MDR services, driving detection engineering, threat hunting across multiple domains, and managing cyber incidents with cross-team coordination.

You will establish playbooks for insider threat, ransomware and data-integrity events, build forensic-readiness, and govern

Qualifications

• Significant experience leading security operations, detection and response in a complex technology environment.
• Proven experience leading serious cyber incidents across technical, operational, legal, compliance and senior stakeholder groups.
• Strong practical knowledge of SIEM, EDR/XDR, MDR/SOC services, detection engineering, threat hunting, identity and cloud telemetry, and incident case management.
• Experience with incident playbooks, crisis exercises, containment, recovery, digital forensics and evidence handling.
• Experience managing security service providers and translating tooling and contracts into measurable operational outcomes.

Responsibilities

• Own the Security Operations strategy, operating model, roadmap, service standards and day-to-day effectiveness.
• Lead oversight of SOC and MDR services, aligning monitoring and detection coverage to priority threats and critical assets.
• Drive detection engineering and threat hunting across endpoint, identity, network, cloud, SaaS, Linux, containers, repositories and data flows.
• Lead material cyber incidents, coordinating investigation, containment, eradication, communications and recovery across relevant teams.
• Maintain and exercise response playbooks for insider threat, IP theft, ransomware, identity or cloud compromise, supplier compromise and data-integrity events.
• Establish forensic-readiness, evidence-handling and investigation practices suitable for legal, regulatory and disciplinary needs.
• Work with Technology teams to establish rapid containment actions, secure restoration criteria and cyber-recovery assurance.
• Provide operational leadership for vulnerability and exposure management, using risk-based prioritisation, service levels and escalation.
• Define clear security operations metrics and executive reporting, and ensure actions from incidents and exercises are tracked to closure.
• Build and develop the internal team and govern specialist providers through measurable outcomes and continuous improvement.Significant experience leading security operations, detection and response, incident response or cyber defence in a complex technology environment.

Job description

Squarepoint is seeking an IT Sec Operations Lead to head global security operations, including threat monitoring, detection and response, incident management, forensic readiness and cyber recovery. The role covers overseeing SOC/MDR services, driving detection engineering, threat hunting across multiple domains, and managing cyber incidents with cross-team coordination.

You will establish playbooks for insider threat, ransomware and data-integrity events, build forensic-readiness, and govern