Senior Cyber Security Response Manager

UK Home Office; Salford; Hybride; GBP 50 000 - 58 000; Plein temps

Avantages offerts par ce poste

Civil Service Pension

Reward scheme

25 days annual leave

8 public holidays + 1 privilege day

Hybrid/60% on-site work

Résumé du poste

UK Home Office seeks a Senior Response Manager to join the Cyber Security Operations Centre as a Senior SOAR & Detection-as-Code Analyst. You will design, develop and maintain security automation workflows and playbooks using SOAR platforms, applying Detection-as-Code methodologies to improve threat detection and incident response.

You will work with SOC teams to reduce risk, enhance monitoring, and lead a team in a technical environment.

Qualifications

• Investigations in a Security Operations Centre environment.
• Designing, developing, testing and improving security automation workflows and playbooks using SOAR or similar technologies.
• Clear verbal and written communication across audiences.

Responsabilités

• Carry out security monitoring, detection and response aligned to standards, advising on mitigation and risk reduction.
• Identify and investigate indicators of malicious activity across networks, systems and apps.
• Triage security events and alerts, suggest improvements to monitoring and detection.
• Support incident response activities including red teaming and threat hunting, sharing lessons learned.
• Develop and improve monitoring use cases and alert effectiveness across security technologies.
• Define and enhance processes, tooling and security controls to identify emerging threats and implement mitigation.
• Drive service and process improvements using best practices to support operations and investigations.

Connaissances

SOC operations

Security automation

DaC methodologies

Threat hunting

Team management

Outils

SOAR platforms

Description du poste

Locations: Peterborough | Salford | Sheffield Hybrid with 60% of time spent on site

Salary: £49,850 plus skills allowance of up to £7,550

Close date: Monday 2nd November 2026

We are seeking a Senior Response Manager to join the Cyber Security Operations Centre (CSOC) as a Senior SOAR & Detection-as-Code (DaC) Analyst. This role focuses on improving cyber detection, response and automation capabilities through security automation, response playbooks and Detection-as-Code practices. You will design, develop, test, maintain and improve security automation workflows, response playbooks and integrations using SOAR platforms or comparable automation technologies, while applying structured and repeatable DaC methodologies.

You will work with SOC teams and other business areas to improve incident handling, implement complex solutions for emerging threats, contribute to relevant standards and process improvements, and reduce operational effort and future risk.

As a Senior Response Manager your main responsibilities will be to;

• Carry out security monitoring, detection and response activities in line with agreed standards, providing advice on mitigation, escalation and risk reduction.
• Identify, analyse and investigate indicators of malicious activity across networks, systems and applications, supporting effective threat detection and incident response.
• Triage security events and alerts, supporting investigations and recommending improvements to monitoring controls, detection coverage and overall security posture.
• Support incident response activities, including red teaming and threat hunting exercises, communicating investigation outcomes and contributing to lessons learned and post-incident reviews.
• Develop, review and continuously improve monitoring use cases, detection content and alert effectiveness across a range of security technologies.
• Define and enhance processes, tooling and security controls to identify emerging threats, strengthen detection capabilities and implement effective mitigation strategies.
• Drive service and process improvements by applying industry best practice, sound judgement and problem-solving skills to support efficient security operations and investigations.

You will have a demonstrable passion for Cyber Security, Detection and Responsewith the following skills, knowledge or experience;

• Conducting investigations and working in a 'Security Operations Centre' environment, supporting security operations and incident response activities.
• Designing, developing, testing maintaining and improving security automation workflows, response playbooks and integrations using SOAR platforms or comparable automation technologies, while applying DaC methodologies.
• Communicating in a verbal and written manner, and a good understanding of the use of different channels and formats for different audiences.
• Building strong partnerships with peers across an organisation and navigating the complex landscape of technologies, 3rd party suppliers, and other teams.
• Managing a team in a technical environment.

Working Pattern

This role is available on a full-time basis with the option of compressed hours working. This role is also suitable for part-time working hours, with a minimum requirement to work 4 days/ 30 hours per week due to business requirements.

Please note that this role requires Security Check (SC) clearance. To be eligible, candidates must have lived in the UK continuously for the last 5 years. Failure to meet this residency requirement will result in your security clearance application being rejected. Candidates must also hold or be prepared to undergo Non-Police Personnel Vetting Level 3 (NPPV3).

Why work for us...

Find out more information at: Benefits - Home Office Careers, but some of the primary ones are:

• A Civil Service Pension with employer contribution rates of at least 28.97%.
• In-year reward scheme for one-off or sustained exceptional personal or team achievements.
• 25 days annual leave on appointment, rising with service.
• 8 days of public holidays, plus 1 additional privilege day.
• Where business needs allow, some roles may be suitable for a combination of office and home-based working. This is a non-contractual arrangement where all employees will be expected to spend a minimum of 60% of their working time in an office.