Hybrid Security Operations & Incident Response Lead

Paconsulting; Belfast City District; Hybrid; GBP 60,000 - 95,000; Full time

Benefits offered by this job

Hybrid work model

Development budget for training

Mentoring & knowledge sharing

Job summary

Paconsulting is seeking a Security Operations Consultant to lead SOC analysts and incident response specialists, guiding day-to-day security operations and escalation during live cyber incidents.

You will help clients modernise their security operations, optimise SIEM/SOAR/EDR capabilities and advance cyber resilience across enterprise and public sector environments, with hybrid work and client-site requirements.

Qualifications

• Experience leading or supervising a SOC, CSOC, or Incident Response team.
• Practical experience managing live cyber incidents (ransomware, account takeovers, supply chain breaches).
• Direct experience with major SIEM/SOAR tools and EDR/XDR platforms.
• Solid understanding of MITRE ATT&CK, NIST CSF, NCSC Caf v4.0.

Responsibilities

• Lead and develop SOC analysts and incident response specialists with clear operational direction.
• Coordinate investigation, containment, eradication, and recovery during cyber security incidents.
• Advise clients on improving Security Operations capabilities across people, processes and technology.
• Improve SIEM, SOAR, EDR tooling and threat detection to reduce noise and strengthen response.
• Develop incident playbooks, SOPs, and automated response workflows.

Skills

SOC Leadership

Incident Response

SIEM/SOAR/EDR experience

MITRE ATT&CK/NIST/NCSC

Tools

Microsoft Sentinel

Splunk

Microsoft Defender for Endpoint

CrowdStrike Falcon

Job description

Paconsulting is seeking a Security Operations Consultant to lead SOC analysts and incident response specialists, guiding day-to-day security operations and escalation during live cyber incidents.

You will help clients modernise their security operations, optimise SIEM/SOAR/EDR capabilities and advance cyber resilience across enterprise and public sector environments, with hybrid work and client-site requirements.