Security Operations Manager

SPG Resourcing; York and North Yorkshire; On-site; GBP 80,000 - 100,000; Full time

Benefits offered by this job

Annual bonus

Pension scheme (up to 12%)

Life Assurance (up to 10 x salary)

Private medical cover

28 days annual leave + bank holidays

Buy/sell up to 5 days leave

Job summary

SPG Resourcing is seeking a SOC Manager for a leading international insurance business in York. You will strengthen cyber defence, improve detection capability, and support incident response within a high-performing Cyber Fusion Centre.

This role offers a hybrid working pattern (on site 1 day a week) and a chance to shape proactive security operations, drive continuous improvement across detection use cases, and protect critical business assets.

Qualifications

• 6+ years in a security operations team with management experience.
• Proven incident response leadership and breach remediation.
• Strong knowledge of SIEM/EDR/XDR technologies and firewall architecture.
• understands forensic processes and data sources for detection.

Responsibilities

• Direct and guide the Blue Team, aligning activity with security objectives and threat intel.
• Oversee continuous monitoring for breaches or anomalies across networks and systems.
• Design and maintain incident response plans for effective mitigation.
• Coordinate Blue Team exercises to improve detection and response readiness.
• Develop and maintain security operations policies and playbooks.

Skills

Security operations

Incident response

SIEM

EDR

XDR

Firewalls

Leadership

Communication

Education

BSc in Cybersecurity

MSc in Cybersecurity

Tools

SIEM tools

EDR

XDR

Firewalls

Job description

SOC Manager

Salary: £80,000.00 to £100,000.00

Location: York

Hybrid - On site 1 day a week.

A leading international insurance business is seeking a SOC Manager to strengthen cyber defence, improve detection capability, and support incident response within a high-performing Cyber Fusion Centre.

This is a fantastic opportunity to shape proactive security operations, drive continuous improvement across detection use cases, and play a key part in protecting critical business assets. The SOC Manager will work alongside specialist security leaders and project teams, helping to mature the company’s monitoring, response, and resilience capabilities.

Responsibilities

• Direct and guide the Blue Team in daily operations, aligning activity with business security objectives and threat intelligence.
• Oversee continuous monitoring of networks and systems for security breaches or anomalies.
• Design and maintain incident response plans to support effective mitigation of security events.
• Coordinate Blue Team exercises to strengthen detection and response readiness.
• Allocate and manage resources to support performance and address skill or capacity gaps.
• Perform gap analysis across detection use cases and identify new data sources for SIEM onboarding.
• Use actionable threat intelligence to develop new detection use cases and improve SIEM capability.
• Support operational resilience across technology, people, and process for detection and response.
• Lead initial response to security incidents, including escalation and post-incident lessons learned.
• Coach and mentor team members to encourage continuous learning and professional development.
• Develop and maintain security operations policies, processes, and playbooks.
• Provide regular reporting on security status, incidents, and KRIs to senior stakeholders.

Experience & Skills

• 6+ years’ experience in a security operations team, including around 2 years in a management role.
• Demonstrable experience leading response to security incidents and breaches.
• Strong understanding of defensive security strategies and cyber incident response processes.
• Excellent working knowledge of SIEM tools and technologies.
• Excellent working knowledge of EDR and XDR technologies.
• Excellent working knowledge of firewalls and other network security appliances.
• Good understanding of forensics technologies and processes.
• Strong problem solving and analytical skills, with the ability to make sound decisions under pressure.
• Excellent leadership, management, communication, and interpersonal skills.
• Advanced cyber certifications such as CISSP, CISM, GCIH, and GPEN are desirable.
• BSc or MSc in Cybersecurity is highly desirable.

Benefits

• Competitive annual salary dependent on experience
• Annual company & performance-based bonus
• Contributory pension scheme (up to 12% employer contributions)
• Life Assurance (up to 10 x annual salary)
• Private medical cover
• 28 days annual leave plus Bank Holidays
• Opportunity to buy up to 5 extra days leave or sell up to 5 days leave
• Wellbeing services & resources

Additional

• Right to work in the UK required
• Equal opportunities employer

Equal Opportunity Statement:

SPG Resourcing is an equal opportunities employer and is committed to fostering an inclusive workplace which values and benefits from the diversity of the workforce we hire. We offer reasonable accommodation at every stage of the application and interview process.