Security Operations Manager

Sanderson; Milton Keynes; Hybrid; GBP 54,000 - 90,000; Full time

Job summary

Sanderson is seeking a Security Operations Manager in Milton Keynes with a hybrid working pattern. You will lead an internal SOC team, oversee SIEM operations and drive incident response and threat detection initiatives.

You will collaborate with Infrastructure, Engineering and Architecture to mature the security operations capability, manage external SOC/MSSP providers, and explore automation and AI to enhance detection and response.

Qualifications

• Strong technical grounding in Security Operations, SOC and SIEM environments.
• Experience building or maturing SecOps capabilities and leading teams.
• Ability to manage and challenge external SOC/MSSP providers and drive improvements.

Responsibilities

• Lead and develop a team of Security Analysts.
• Manage and improve SOC/SIEM operations and incident response.
• Lead security incidents, investigations and remediation efforts.

Skills

Team leadership

SOC operations

SIEM

Incident response

Threat detection

Vulnerability management

Vendor management

Automation

AI in security

Tools

Sentinel

Defender XDR

Purview

Job description

Security Operations Manager | Up to £90,000 + Bonus | Milton Keynes - Hybrid

I'm working with a large UK organisation that is continuing to invest significantly in its Cyber Security capability and is looking for a Security Operations Manager to play a key role in the next stage of its journey.

This is a great opportunity for someone who wants more than simply managing an established SOC. You'll have the opportunity to develop and mature the Security Operations capability, leading an internal team alongside third-party security providers.

The role will cover:

• Leading and developing a team of Security Analysts
• Managing and improving SOC/SIEM operations
• Leading security incidents, investigations and response
• Developing threat detection and monitoring capability
• Driving vulnerability management and remediation
• Managing and challenging external SOC/MSSP providers
• Optimising security tooling, processes and playbooks
• Working closely with Infrastructure, Engineering and Architecture
• Improving security metrics and operational reporting
• Exploring automation and AI across Security Operations

The environment has a strong Microsoft security focus, including Sentinel, Defender/XDR and Purview, alongside wider cloud and hybrid infrastructure.

I'm particularly interested in speaking with people who have a strong technical grounding across Security Operations, SOC and SIEM environments, but who have progressed into leadership and can demonstrate experience building, improving or maturing SecOps capability.

Milton Keynes - Hybrid working