Lead Cyber Security Operations & Incident Response

Morson Group; Greater Manchester; Hybrid; GBP 90,000 - 110,000; Full time

Benefits offered by this job

Pension

Generous leave allowance

Private healthcare

Flexible benefits

Hybrid work policy (8 days/month)

Performance bonuses

Job summary

Smart DCC in the United Kingdom is seeking a Lead Cyber Security Operations Analyst for a hybrid role in Manchester or London. You will lead complex cyber incident investigations, shape the future of our Security Operations Centre capabilities, and strengthen cyber resilience across the smart energy sector.

This position combines technical leadership with mentoring and cross-team collaboration to influence security best practices across DCC and the wider industry.

Qualifications

• Experience leading cyber security incident response in complex environments.
• Experience working within a Security Operations environment.
• Strong understanding of the cyber threat landscape and MITRE ATT&CK framework.
• Knowledge of cloud and SaaS technologies including AWS, Azure, Microsoft 365 and Defender.
• Ability to obtain and maintain Security Check clearance and confidently communicate with stakeholders.

Responsibilities

• Lead cyber security investigations and major incident response activities, providing technical leadership during security incidents.
• Drive development of new detection content, machine learning analytics and security automation within the SOC.
• Support, mentor and develop team capability through technical coaching, training and tabletop exercises.
• Build and enhance threat intelligence capabilities, translating emerging threats into actionable security improvements.
• Collaborate with internal and external stakeholders to identify opportunities to strengthen security and advance cyber resilience.

Skills

Cyber security incident response

Security Operations Center

MITRE ATT&CK

Cloud & SaaS (AWS/Azure/M365/Defender)

SC clearance eligibility

Job description

Smart DCC in the United Kingdom is seeking a Lead Cyber Security Operations Analyst for a hybrid role in Manchester or London. You will lead complex cyber incident investigations, shape the future of our Security Operations Centre capabilities, and strengthen cyber resilience across the smart energy sector.

This position combines technical leadership with mentoring and cross-team collaboration to influence security best practices across DCC and the wider industry.