Head of Security Operations & Detection Strategy

Sokin; Harrow; On-site; GBP 120,000 - 170,000; Full time

Job summary

Sokin is seeking a senior security operations lead to own detection strategy, incident management, and vulnerability governance across cloud and on-premises environments. You will shape the MSSP split, drive bespoke detections, and maintain governance over identity and access controls while coordinating with legal/comms on regulatory timelines.

You’ll work closely with the CISO, scale the SOC function, and ensure robust security postures across global payments platforms.

Qualifications

• Hands-on security operations experience across cloud and endpoint.
• Ability to translate threat intel into detection priorities.
• Experience managing MSSP/outsourced SOC relationships.

Responsibilities

• Define and own detection strategy aligned to MITRE ATT&CK and real incidents.
• Oversee MSSP relationship, SLAs, and scope evolution.
• Lead L3 investigations and forensics across cloud and endpoints.
• Develop incident response playbooks and runbooks with tabletop testing.
• Drive vulnerability management program and identity governance.
• Manage security metrics (MTTD/MTTR) and team performance.

Skills

Microsoft Sentinel

Incident response

Threat hunting

MITRE ATT&CK

Vulnerability management

Identity governance

SIEM onboarding

DLP / Defender for O365

Executive communication

MTTD / MTTR tracking

Tools

Defender XDR

Wiz

Cloudflare

Zscaler

Azure Monitor

Sentinel content

Job description

Sokin is seeking a senior security operations lead to own detection strategy, incident management, and vulnerability governance across cloud and on-premises environments. You will shape the MSSP split, drive bespoke detections, and maintain governance over identity and access controls while coordinating with legal/comms on regulatory timelines.

You’ll work closely with the CISO, scale the SOC function, and ensure robust security postures across global payments platforms.