Security Operations Lead — Incident Response & Cloud Defense

Kubrick Group; Greater London; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Hybrid working

Pension matching up to 5%

Mental health support (Help@Hand)

Cycle to Work

Specsavers eye care

Learning and development opportunities

Employee Assistance Program (EAP)

Diversity and inclusion support

Job summary

Kubrick Group is seeking a hands-on Security Analyst to lead our Security Operations. You will monitor, triage and investigate alerts using Microsoft Sentinel, Defender and EDR, while driving incident response and continuous improvement.

You’ll enhance runbooks, playbooks and security processes, and support client security questionnaires and RFPs. The role covers governance and ISO/NIST compliance, with hybrid working options and opportunities to grow within a fast-paced cyber defence

Qualifications

• Hands-on security project or implementation experience.

Responsibilities

• Lead Security Operations, monitor, triage and investigate alerts through Microsoft Sentinel, Defender and EDR, working with SIEM partner.
• Own end-to-end incident response, containment, eradication, recovery and post-incident reviews.
• Develop and maintain runbooks, response playbooks and docs to enable scalable security.
• Drive cyber security projects, implementing and optimising controls across the Microsoft security stack.
• Oversee vulnerability management, including scanning, risk assessment and remediation prioritisation.
• Support Business Continuity and Disaster Recovery exercises and tests.
• Champion security governance and compliance (ISO 27001, NIST, Cyber Essentials Plus).
• Engage with clients on due diligence, RFPs and tender responses to demonstrate security excellence.

Skills

Cybersecurity basics

CISM

CISSP

Microsoft Defender

Purview

Intune

Entra ID

Sentinel

M365 services

AI/ML security

Vulnerability management

DLP

Data classification

Information protection

BYOD security

Azure security

Cloud security

ISO 27001

NIST

Cyber Essentials

PowerShell

Communication

Penetration testing

PAM

CASB

SC-200

AZ-500

CompTIA Security+

Tools

Microsoft Defender

Purview

Intune

Entra ID

Sentinel

M365

Job description

Kubrick Group is seeking a hands-on Security Analyst to lead our Security Operations. You will monitor, triage and investigate alerts using Microsoft Sentinel, Defender and EDR, while driving incident response and continuous improvement.

You’ll enhance runbooks, playbooks and security processes, and support client security questionnaires and RFPs. The role covers governance and ISO/NIST compliance, with hybrid working options and opportunities to grow within a fast-paced cyber defence