Security Operations Manager

SPG Resourcing; York and North Yorkshire; On-site; GBP 70,000 - 95,000; Full time

Benefits offered by this job

Pension scheme (up to 12% employer)

Life Assurance (up to 10x salary)

Private medical cover

28 days annual leave + bank holidays

Buy/sell up to 5 days leave

Job summary

SPG Resourcing is seeking a SOC Manager to strengthen cyber defence within a leading international insurance business. The role focuses on maturing monitoring, response, and resilience capabilities, working with security leaders to drive continuous improvement.

You will lead the Blue Team in daily operations, oversee detection across networks and systems, and develop incident response plans. A 6+ year track record in security operations, with ~2 years in management, is expected.

Qualifications

• 6+ years in a security operations team, including around 2 years in a management role.
• Demonstrable experience leading response to security incidents and breaches.
• Strong understanding of defensive security strategies and cyber incident response processes.
• Excellent working knowledge of SIEM tools and technologies.
• Excellent working knowledge of EDR and XDR technologies.
• Excellent working knowledge of firewalls and other network security appliances.
• Good understanding of forensics technologies and processes.
• Strong problem solving and analytical skills, with the ability to make sound decisions under pressure.
• Excellent leadership, management, communication, and interpersonal skills.
• Advanced cyber certifications such as CISSP, CISM, GCIH, and GPEN are desirable.

Responsibilities

• Direct and guide the Blue Team in daily operations, aligning activity with business security objectives and threat intelligence.
• Oversee continuous monitoring of networks and systems for security breaches or anomalies.
• Design and maintain incident response plans to support effective mitigation of security events.
• Coordinate Blue Team exercises to strengthen detection and response readiness.
• Allocate and manage resources to support performance and address skill or capacity gaps.
• Perform gap analysis across detection use cases and identify new data sources for SIEM onboarding.
• Use actionable threat intelligence to develop new detection use cases and improve SIEM capability.
• Support operational resilience across technology, people, and process for detection and response.
• Lead initial response to security incidents, including escalation and post-incident lessons learned.
• Coach and mentor team members to encourage continuous learning and professional development.
• Develop and maintain security operations policies, processes, and playbooks.
• Provide regular reporting on security status, incidents, and KRIs to senior stakeholders.

Skills

SOC leadership

Incident response

SIEM

EDR/XDR

Network security

Forensics

Threat intelligence

Leadership

Communication

Security certifications (CISSP/CISM/GC

Education

BSc/MSc Cybersecurity

Tools

SIEM

EDR/XDR

Firewalls

Job description

A leading international insurance business is seeking a SOC Manager to strengthen cyber defence, improve detection capability, and support incident response within a high-performing Cyber Fusion Centre.

This is a fantastic opportunity to shape proactive security operations, drive continuous improvement across detection use cases, and play a key part in protecting critical business assets. The SOC Manager will work alongside specialist security leaders and project teams, helping to mature the company’s monitoring, response, and resilience capabilities.

Responsibilities

• Direct and guide the Blue Team in daily operations, aligning activity with business security objectives and threat intelligence.
• Oversee continuous monitoring of networks and systems for security breaches or anomalies.
• Design and maintain incident response plans to support effective mitigation of security events.
• Coordinate Blue Team exercises to strengthen detection and response readiness.
• Allocate and manage resources to support performance and address skill or capacity gaps.
• Perform gap analysis across detection use cases and identify new data sources for SIEM onboarding.
• Use actionable threat intelligence to develop new detection use cases and improve SIEM capability.
• Support operational resilience across technology, people, and process for detection and response.
• Lead initial response to security incidents, including escalation and post-incident lessons learned.
• Coach and mentor team members to encourage continuous learning and professional development.
• Develop and maintain security operations policies, processes, and playbooks.
• Provide regular reporting on security status, incidents, and KRIs to senior stakeholders.

Experience & Skills

• 6+ years’ experience in a security operations team, including around 2 years in a management role.
• Demonstrable experience leading response to security incidents and breaches.
• Strong understanding of defensive security strategies and cyber incident response processes.
• Excellent working knowledge of SIEM tools and technologies.
• Excellent working knowledge of EDR and XDR technologies.
• Excellent working knowledge of firewalls and other network security appliances.
• Good understanding of forensics technologies and processes.
• Strong problem solving and analytical skills, with the ability to make sound decisions under pressure.
• Excellent leadership, management, communication, and interpersonal skills.
• Advanced cyber certifications such as CISSP, CISM, GCIH, and GPEN are desirable.
• BSc or MSc in Cybersecurity is highly desirable.
• Competitive annual salary dependent on experience
• Annual company & performance-based bonus
• Contributory pension scheme (up to 12% employer contributions)
• Life Assurance (up to 10 x annual salary)
• Private medical cover
• 28 days annual leave plus Bank Holidays
• Opportunity to buy up to 5 extra days leave or sell up to 5 days leave

Additional

• Right to work in the UK required
• Equal opportunities employer

Equal Opportunity Statement:

SPG Resourcing is an equal opportunities employer and is committed to fostering an inclusive workplace which values and benefits from the diversity of the workforce we hire. We offer reasonable accommodation at every stage of the application and interview process.