Security Operations Leader & Incident Response Expert

PA Consulting Group; Belfast City District; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Health and lifestyle perks

25 days annual leave

Generous pension scheme

Community initiatives

Annual performance-based bonus

PA share ownership

Tax efficient benefits

Job summary

PA Consulting Group in the United Kingdom is seeking a Security Operations Manager to lead SOC analysts and incident response specialists within our Digital Trust & Cyber Security practice. You will balance hands-on operational leadership with advisory work, guiding live incidents and day-to-day SOC operations.

You will help enterprise and public sector clients modernise their security operations, improve SIEM, SOAR and EDR capabilities, and build stronger cyber resilience while collaborating

Qualifications

• Experience leading or supervising a SOC, CSOC, or IR team.
• Practical experience managing live cyber incidents.
• Hands-on with SIEM/SOAR and EDR/XDR tooling.
• Strong knowledge of MITRE ATT&CK, NIST CSF, ISO 27001.
• Ability to write concise incident reports and present to leaders.
• Experience in management consulting or client-facing advisory roles.
• Familiarity with regulated UK environments (government/defense/CNI).
• Hands-on cloud security monitoring in AWS/Azure/GCP.

Responsibilities

• Lead and develop SOC analysts and incident responders with clear direction.
• Coordinate investigation, containment, eradication, recovery during incidents.
• Advise clients on improving security operations and tooling.
• Develop and maintain incident playbooks and auto‑mated workflows.
• Collaborate with cross-functional teams to deliver client outcomes.
• Support continuous improvement of services and knowledge sharing.

Skills

SOC Leadership

Incident Response

Technical Stack

Security Frameworks

Communication

Consulting Experience

UK Regulatory Environments

Cloud Security Monitoring

Job description

PA Consulting Group in the United Kingdom is seeking a Security Operations Manager to lead SOC analysts and incident response specialists within our Digital Trust & Cyber Security practice. You will balance hands-on operational leadership with advisory work, guiding live incidents and day-to-day SOC operations.

You will help enterprise and public sector clients modernise their security operations, improve SIEM, SOAR and EDR capabilities, and build stronger cyber resilience while collaborating