Security Operations Specialist ( L3 )

Michael Page; West Kirby; Hybrid; GBP 46,000 - 60,000; Full time

Benefits offered by this job

Private healthcare

Life assurance

Hybrid working

Job summary

Michael Page is working with a professional services client in the UK to recruit a security operations expert. The role focuses on security monitoring, incident investigation, threat analysis, and improving operational security maturity.

It is a 12-month FTC with strong potential to extend, offering hybrid working across major offices. The ideal candidate has SOC experience, incident response skills, and familiarity with SIEM, IAM, and DLP technologies, along with cloud security exposure and

Qualifications

• Experience in a SOC or cyber security operations.
• Experience investigating incidents and coordinating response activities.
• Knowledge of cyber attack techniques and mitigation strategies.
• Experience securing cloud-based and enterprise collaboration environments.
• Familiarity with MITRE ATT&CK and cyber threat intelligence.
• Understanding of modern security frameworks and detection engineering concepts.
• Knowledge of SIEM, IAM, and DLP technologies.
• Ability to work across technology and business teams to drive security improvements.
• Strong analytical and problem-solving skills.
• Willingness to engage in continuous learning about threats and trends.

Responsibilities

• Investigating and responding to security incidents escalated through the Security Operations function.
• Performing detailed security event analysis and identifying potential threats or areas requiring further investigation.
• Working closely with external security service providers to ensure effective monitoring, alert management, and incident handling.
• Supporting cyber incident response activities as a technical security specialist.
• Analyzing security metrics and trends, providing recommendations to improve security controls and reduce risk.
• Delivering and managing security awareness initiatives, including phishing simulations and remediation activities.
• Maintaining and optimising security monitoring and protection platforms across the technology estate.
• Conducting security reviews of systems, infrastructure, and operational processes.
• Collaborating with technology and business teams to drive continuous security improvements.
• Ensuring security operations align with regulatory, governance, and industry best practices.
• Contributing to the development and implementation of operational security controls and procedures.

Skills

SOC experience

Incident response

Threat detection

SIEM

IAM

DLP

Analytical skills

Problem solving

Education

Degree in Cyber Security

CISSP or equivalent

GIAC / CompTIA Security+

Tools

SIEM platforms

IAM tools

DLP technologies

Job description

This position focuses on security monitoring, incident investigation, threat analysis, and operational security improvement. The successful candidate will act as a subject matter expert for cyber security operations, supporting both proactive and reactive security activities while helping to enhance the organisation's overall security maturity. This is a 1 year FTC role with high potential to extend.

Client Details

Our client is a well-established and respected professional services organisation with a strong national presence and a reputation for delivering high-quality solutions to a broad client base. With ongoing investment in technology and cybersecurity, they are committed to maintaining a secure and resilient environment that supports business growth, innovation, and operational excellence.

Description

• Investigating and responding to security incidents escalated through the Security Operations function.
• Performing detailed security event analysis and identifying potential threats or areas requiring further investigation.
• Working closely with external security service providers to ensure effective monitoring, alert management, and incident handling.
• Supporting cyber incident response activities as a technical security specialist.
• Analysing security metrics and trends, providing recommendations to improve security controls and reduce risk.
• Delivering and managing security awareness initiatives, including phishing simulations and remediation activities.
• Maintaining and optimising security monitoring and protection platforms across the technology estate.
• Conducting security reviews of systems, infrastructure, and operational processes.
• Collaborating with technology and business teams to drive continuous security improvements.
• Ensuring security operations align with relevant regulatory, governance, and industry best practice requirements.
• Contributing to the development and implementation of operational security controls and procedures.

Profile

• Previous experience working within a Security Operations Centre (SOC) or equivalent cyber security environment.
• Demonstrated experience in security operations, cyber defence, incident response, threat detection, or a related security discipline.
• Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies.
• Experience investigating security incidents and coordinating response activities.
• Knowledge of Security Information and Event Management (SIEM), Identity and Access Management (IAM), and Data Loss Prevention (DLP) technologies.
• Good understanding of modern security frameworks, detection engineering concepts, and operational security best practices.
• Experience securing cloud-based and enterprise collaboration environments.
• Familiarity with cyber threat intelligence and attack frameworks such as MITRE ATT&CK.
• Strong analytical and problem-solving skills with the ability to assess security risks effectively.
• A proactive approach to continuous learning and staying current with emerging threats and security trends.

Desirable

• Degree in Cyber Security, Information Technology, Computer Science, or a related discipline.
• Relevant industry certifications such as CISSP, GIAC, CompTIA Security+, SC-200, AZ-500, or equivalent.
• Experience working within regulated or enterprise-scale environments.

Job Offer

Private healthcare. Life assurance.

hybrid working in offices (Liverpool, Glasgow, London)

Ongoing training and professional development opportunities