Lead Cyber Security Operations Analyst

Morson Group; Greater Manchester; Hybrid; GBP 90,000 - 110,000; Full time

Benefits offered by this job

Pension

Generous leave allowance

Private healthcare

Flexible benefits

Hybrid work policy (8 days/month)

Performance bonuses

Job summary

Smart DCC in the United Kingdom is seeking a Lead Cyber Security Operations Analyst for a hybrid role in Manchester or London. You will lead complex cyber incident investigations, shape the future of our Security Operations Centre capabilities, and strengthen cyber resilience across the smart energy sector.

This position combines technical leadership with mentoring and cross-team collaboration to influence security best practices across DCC and the wider industry.

Qualifications

• Experience leading cyber security incident response in complex environments.
• Experience working within a Security Operations environment.
• Strong understanding of the cyber threat landscape and MITRE ATT&CK framework.
• Knowledge of cloud and SaaS technologies including AWS, Azure, Microsoft 365 and Defender.
• Ability to obtain and maintain Security Check clearance and confidently communicate with stakeholders.

Responsibilities

• Lead cyber security investigations and major incident response activities, providing technical leadership during security incidents.
• Drive development of new detection content, machine learning analytics and security automation within the SOC.
• Support, mentor and develop team capability through technical coaching, training and tabletop exercises.
• Build and enhance threat intelligence capabilities, translating emerging threats into actionable security improvements.
• Collaborate with internal and external stakeholders to identify opportunities to strengthen security and advance cyber resilience.

Skills

Cyber security incident response

Security Operations Center

MITRE ATT&CK

Cloud & SaaS (AWS/Azure/M365/Defender)

SC clearance eligibility

Job description

Lead Cyber Security Operations Analyst / Hybrid Location: Manchester or London

Closing Date: 6/11/2026

Join Smart DCCs Cyber Security team and play a key role in protecting one of the UKs most critical digital infrastructures. As Lead Cyber Security Operations Analyst, youll lead complex cyber incident investigations, shape the future of our Security Operations Centre capabilities, and help strengthen cyber resilience across the smart energy sector. This is an exciting opportunity to combine technical expertise, leadership and innovation while influencing security best practice across DCC and the wider industry.

About the DCC

We’re powering Britain’s smarter, greener future. Today. Tomorrow. Together.
Today, we’re deeply invested in building a resilient, sustainable smart energy network that drives transformation. Our success is driven by curiosity, ambition, and tenacity.

Tomorrow, we see vast opportunities for growth and development, contributing to decarbonisation and the Net Zero mission. We’ll continually develop Smart DCC, to fulfil our obligations to consumers, and achieve even more with our customers, partners, and each other. Join us and development opportunities range from talent programmes, academies and always on learning to exposure to senior stakeholders and industry experts, contributing to complex projects and constant support to drive your own development.
Together, we embrace change, unite in our shared passions and support each other. Working as one team and across our industry, we rise to the challenge to shape Smart DCC, and the future.

A career at Smart DCC means being part of something bigger – a dynamic organisation that’s not just helping transform energy but also shaping the future. We offer a unique, fulfilling environment where you can thrive today, develop for tomorrow, and achieve together.

How you will contribute to transforming the smart energy network and shaping the future:

• Lead cyber security investigations and major incident response activities, providing technical leadership during security incidents.
• Drive the development of new detection content, machine learning analytics and security automation capabilities within the SOC.
• Support, mentor and develop team capability through technical coaching, training and tabletop exercises.
• Build and enhance threat intelligence capabilities, translating emerging threats into actionable security improvements.
• Collaborate with internal and external stakeholders to identify opportunities to strengthen security and advance cyber resilience.

What you need to bring:

• Demonstrable experience leading cyber security incident response and investigations in complex environments.
• Previous experience working within a Security Operations environment.
• Strong understanding of the cyber threat landscape and the MITRE ATT&CK Framework.
• Knowledge of cloud and SaaS technologies including AWS, Azure, Microsoft 365 and Microsoft Defender.
• Ability to obtain and maintain Security Check (SC) clearance and confidently communicate with and influence stakeholders.

Benefits:

While our mission is ambitious, we also prioritise balance offering flexibility and support to help you thrive both personally and professionally. At DCC we reward fairly and recognise fully because our continued success depends on our people.
We also offer a competitive 8 days per month hybrid work policy for most roles as well as competitive salaries with regular benchmarking, bonuses tied to personal and company performance. Our core benefits include pension, generous leave allowance, private healthcare and range of flexible benefits that you can tailor to you.

As a Disability Confident member, DCC is committed to ensuring an inclusive and accessible recruitment process. If you require any reasonable adjustments, need a copy of this job advert in an alternative format, or have any other questions you’d like to ask before applying, please contact: [e-mail]

Join Smart DCC, a dynamic organisation where every day brings a chance to make a difference.