Lead Cyber Security Operations Analyst

Smart DCC Ltd; Manchester; Hybrid; GBP 80,000 - 120,000; Full time

Benefits offered by this job

Pension

Private healthcare

Flexible benefits

Hybrid work policy

Job summary

Smart DCC Ltd is recruiting a Lead Cyber Security Operations Analyst to lead complex cyber incident investigations and shape the SOC. The role is hybrid with sites in Manchester or London, offering senior responsibilities and opportunities to influence security best practice across the organisation.

You will drive detection content development, ML analytics, and security automation while mentoring the team and coordinating with stakeholders to strengthen cyber resilience across the smart energy

Qualifications

• Demonstrated experience leading cyber security incident response and investigations in complex environments.
• Experience working in a Security Operations Centre (SOC).
• Strong understanding of the MITRE ATT&CK framework and cyber threat landscape.
• Knowledge of cloud services (AWS, Azure, Microsoft 365) and Defender/Security features.
• Ability to obtain and maintain Security Check (SC) clearance and influence stakeholders.

Responsibilities

• Lead cyber security investigations and major incident response activities, providing technical leadership during security incidents.
• Drive development of detection content, ML analytics and security automation within the SOC.
• Mentor and develop team capability through coaching, training and tabletop exercises.
• Build and enhance threat intelligence capabilities and translate threats into security improvements.
• Collaborate with internal and external stakeholders to strengthen security and cyber resilience.

Skills

Incident response

SOC experience

MITRE ATT&CK

Cloud platforms

Stakeholder communication

Job description

Together we're building a greener tomorrow

Connecting every home and business to a single, secure smart meter network is a huge undertaking. So you can imagine the scale – and variety – and opportunities for the people who'll help us do it.

The role

Lead Cyber Security Operations Analyst / Hybrid Location: Manchester or London

Closing Date: 6/11/2026

Join Smart DCC's Cyber Security team and play a key role in protecting one of the UK's most critical digital infrastructures. As Lead Cyber Security Operations Analyst, you’ll lead complex cyber incident investigations, shape the future of our Security Operations Centre capabilities, and help strengthen cyber resilience across the smart energy sector. This is an exciting opportunity to combine technical expertise, leadership and innovation while influencing security best practice across DCC and the wider industry.

About the DCC
We're powering Britain's smarter, greener future. Today. Tomorrow. Together.
Today, we're deeply invested in building a resilient, sustainable smart energy network that drives transformation. Our success is driven by curiosity, ambition, and tenacity.

Tomorrow, we see vast opportunities for growth and development, contributing to decarbonisation and the Net Zero mission. We'll continually develop Smart DCC, to fulfil our obligations to consumers, and achieve even more with our customers, partners, and each other. Join us and development opportunities range from talent programmes, academies and always on learning to exposure to senior stakeholders and industry experts, contributing to complex projects and constant support to drive your own development.
Together, we embrace change, unite in our shared passions and support each other. Working as one team and across our industry, we rise to the challenge to shape Smart DCC, and the future.

A career at Smart DCC means being part of something bigger – a dynamic organisation that's not just helping transform energy but also shaping the future. We offer a unique, fulfilling environment where you can thrive today, develop for tomorrow, and achieve together.
How you will contribute to transforming the smart energy network and shaping the future:

• Lead cyber security investigations and major incident response activities, providing technical leadership during security incidents.
• Drive the development of new detection content, machine learning analytics and security automation capabilities within the SOC.
• Support, mentor and develop team capability through technical coaching, training and tabletop exercises.
• Build and enhance threat intelligence capabilities, translating emerging threats into actionable security improvements.
• Collaborate with internal and external stakeholders to identify opportunities to strengthen security and advance cyber resilience.

What you need to bring:

• Demonstrable experience leading cyber security incident response and investigations in complex environments.
• Previous experience working within a Security Operations environment.
• Strong understanding of the cyber threat landscape and the MITRE ATT&CK Framework.
• Knowledge of cloud and SaaS technologies including AWS, Azure, Microsoft 365 and Microsoft Defender.
• Ability to obtain and maintain Security Check (SC) clearance and confidently communicate with and influence stakeholders.

Benefits:

While our mission is ambitious, we also prioritise balance offering flexibility and support to help you thrive both personally and professionally. At DCC we reward fairly and recognise fully because our continued success depends on our people.
We also offer a competitive 8 days per month hybrid work policy for most roles as well as competitive salaries with regular benchmarking, bonuses tied to personal and company performance. Our core benefits include pension, generous leave allowance, private healthcare and range of flexible benefits that you can tailor to you.

As a Disability Confident member, DCC is committed to ensuring an inclusive and accessible recruitment process. If you require any reasonable adjustments, need a copy of this job advert in an alternative format, or have any other questions you'd like to ask before applying, please contact: [e-mail]

Act with integrity

We treat everyone with kindness, consideration and respect. We keep our promises to our customers. And if something doesn’t feel right, we speak up.

Be accountable

You can depend on our word. We’re clear about our roles and we take the initiative, while respecting the processes we have in place.

Location

Location: Greater Manchester

Job type

Job type: Permanent