Senior SecOps Architect: Detection, IR & Automation

Jobtailor; Greater London; On-site; GBP 120,000 - 170,000; Full time

Job summary

Jobtailor in the United Kingdom seeks a senior Security Operations lead to shape and execute the SecOps roadmap, covering detection, response, and investigations. You will build structured plans aligned with MITRE ATT&CK, NIST, and CIS benchmarks, while guiding forensics and incident response activities.

The role requires hands-on SOC/SIEM management, cloud security expertise (AWS/GCP), and a background in automation and threat modeling.

Qualifications

• 10+ years of experience in security operations, incident response, or a closely related discipline.
• Hands-on SOC and SIEM management experience.
• Strong development and engineering background, including writing automation.
• Experience in detection engineering and log pipeline design.
• Willingness to participate in an on-call rotation.
• Must be based in the United Kingdom with valid right to work.

Responsibilities

• Define and deliver SecOps roadmap for detection, response, and investigation capabilities.
• Build a structured roadmap based on MITRE ATT&CK, NIST, and CIS benchmarks.
• Lead security investigations and digital forensics through incident response.
• Design, tune, and scale SIEM and standardized logging pipelines.
• Strengthen perimeter and authentication security through WAF config, auth tuning, and monitoring.
• Automate detection and response workflows using code and AI.

Skills

Security Operations Management

Incident Response

Detection Engineering

SIEM Management

Cloud Security

Automation Development

Digital Forensics

Risk Reduction

Threat Modeling

Compliance Risk Management

Leadership

Mentoring

Education

Tools

SIEM

MITRE ATT&CK

NIST

CIS Benchmarks

AI Automation

AWS

GCP

WAF

DLP

Job description

Jobtailor in the United Kingdom seeks a senior Security Operations lead to shape and execute the SecOps roadmap, covering detection, response, and investigations. You will build structured plans aligned with MITRE ATT&CK, NIST, and CIS benchmarks, while guiding forensics and incident response activities.

The role requires hands-on SOC/SIEM management, cloud security expertise (AWS/GCP), and a background in automation and threat modeling.