Public Sector SOC Lead — Hybrid (Scotland)

Skills Development Scotland; Glasgow; Hybrid; GBP 70,000 - 100,000; Full time

Job summary

Skills Development Scotland is seeking an experienced SOC Lead to head security operations across Scotland. You will manage a team of analysts, coordinate major incidents, and shape incident response across a public sector partnership that spans several organisations and thousands of users.

You will drive the evolution of our SOC, work with Microsoft Sentinel/Defender/Entra ID, and influence cybersecurity strategy and risk management while operating with a hybrid working model and a strong focus

Qualifications

• Extensive experience in security operations, threat detection and incident response.
• Proven leadership experience or readiness to step into a SOC leadership role.
• Knowledge of Microsoft security technologies including Sentinel and Defender.
• Experience working with managed security service providers.
• Demonstrable professional experience equivalent to SCQF Level 9 in Cyber Security or related discipline.

Responsibilities

• Lead and develop the Security Operations Centre and analysts.
• Coordinate major cyber incidents and investigations.
• Collaborate with the managed SOC provider to enhance capabilities.
• Improve detection, monitoring and response processes.
• Influence cyber security strategy and risk management across the partnership.
• Direct cyber exercises and continuous improvement initiatives.

Skills

Security Operations

Threat Detection

Incident Response

Leadership

Stakeholder Management

Cyber Security

Education

SCQF Level 9 in Cyber Security / Information Security / CS

Tools

Microsoft Sentinel

Defender

Entra ID

Purview

Intune

Security Copilot

Job description

Skills Development Scotland is seeking an experienced SOC Lead to head security operations across Scotland. You will manage a team of analysts, coordinate major incidents, and shape incident response across a public sector partnership that spans several organisations and thousands of users.

You will drive the evolution of our SOC, work with Microsoft Sentinel/Defender/Entra ID, and influence cybersecurity strategy and risk management while operating with a hybrid working model and a strong focus