Lead Security Consultant

Trident; Brighton; On-site; GBP 85,000 - 120,000; Full time

Benefits offered by this job

33 days annual leave

On-demand IT courses

Bupa Employee Assistance Programme

Cycle to Work scheme

Microsoft Workplace Discount Programme

Central Brighton office with social 1s

Refer-a-Friend bonus

Job summary

Trident is seeking a Lead Security Consultant to orchestrate complex cyber security incident response, combining hands-on expertise with strategic client guidance to identify threats and strengthen security posture.

You will lead investigations, perform forensic analysis, monitor SIEMs, and mentor junior colleagues while working with clients to reduce risk and ensure regulatory compliance.

Qualifications

• Substantial experience in cyber security operations, incident response, threat hunting or security consultancy.
• Experience leading complex incidents and coordinating multiple stakeholders.
• Experience with SIEM platforms such as Microsoft Sentinel, Splunk, IBM QRadar or ArcSight.
• Broad technical understanding of Microsoft 365, Azure, Windows Server, identity, networking, firewalls, endpoint security, virtualization and resilience technologies.

Responsibilities

• Lead complex incident investigations, forensic analysis and root-cause determination.
• Monitor and analyse security events using SIEM platforms, threat intelligence and security tooling.
• Conduct proactive threat hunting and enrich alerts to identify sophisticated threats and indicators of compromise.
• Coordinate containment, eradication, recovery and post-incident review activity across clients, internal teams and third parties.
• Provide clear risk assessments, incident reports and practical security recommendations to technical and non-technical stakeholders.
• Support security governance and compliance requirements, including UK GDPR, ISO 27001 and PCI DSS where applicable.
• Improve SOC processes, playbooks, tooling and reporting, while mentoring junior security colleagues.

Skills

Cyber security operations

Incident response

Threat hunting

Security consultancy

Client communication

Tools

Microsoft Sentinel

Splunk

IBM QRadar

ArcSight

Job description

Job Title: Lead Security Consultant

Location: Office Based - Brighton

Job Type: Permanent, Full-Time

Salary: Competitive, details on application

About Us

At Trident, we make IT a source of strength, helping organisations thrive so they can better support the people who rely on them every day.

We work in partnership with our clients to provide reliable IT services, practical guidance and people-focused support that strengthen their organisations and enable better outcomes.

Benefits

Joining Trident means becoming part of a supportive and collaborative environment where your contribution is recognised and your professional development is encouraged.

• 33 days' annual leave, including bank holidays, increasing by one day per year of service up to 40 days.
• Access to on-demand IT courses, practice tests and virtual labs.
• Bupa Employee Assistance Programme for you and your family.
• Cycle to Work scheme and vendor pricing on personal IT hardware and software.
• Microsoft Workplace Discount Programme.
• Central Brighton office with social spaces, regular events and a Refer-a-Friend bonus scheme.

About the Role

The Lead Security Consultant leads the investigation, containment and resolution of complex cyber security incidents. Combining hands-on technical expertise with strategic client guidance, you will help Trident and its clients identify threats, reduce risk and strengthen their security posture.

• Lead complex incident investigations, forensic analysis and root-cause determination.
• Monitor and analyse security events using SIEM platforms, threat intelligence and security tooling.
• Conduct proactive threat hunting and enrich alerts to identify sophisticated threats and indicators of compromise.
• Coordinate containment, eradication, recovery and post-incident review activity across clients, internal teams and third parties.
• Provide clear risk assessments, incident reports and practical security recommendations to technical and non-technical stakeholders.
• Support security governance and compliance requirements, including UK GDPR, ISO 27001 and PCI DSS where applicable.
• Improve SOC processes, playbooks, tooling and reporting, while mentoring junior security colleagues.

About You

We are looking for an experienced cyber security professional who combines strong technical capability with sound judgement, commercial awareness and confident client communication.

• Substantial experience in cyber security operations, incident response, threat hunting or security consultancy.
• Demonstrable experience leading complex incidents and coordinating multiple stakeholders.
• Strong experience with SIEM platforms such as Microsoft Sentinel, Splunk, IBM QRadar or ArcSight.
• Practical knowledge of forensic investigation, threat intelligence and evidence-led root-cause analysis.
• Broad technical understanding of Microsoft 365, Azure, Windows Server, identity, networking, firewalls, endpoint security, virtualisation and resilience technologies.
• Ability to explain complex security risks clearly and provide proportionate, commercially aware recommendations.
• Experience within an MSP or multi-client environment is highly desirable.
• PowerShell or Python capability is advantageous.
• A recognised security certification such as CISSP, CISM, GCIH, CompTIA CySA+, SC-200, SC-100 or AZ-500 is desirable.

Please note this role may be advertised under a different title than that used internally.