Senior Security Operations Lead - Cyber Incident Response

Ad Warrior Ltd; Birmingham; Hybrid; GBP 44,000 - 59,000; Full time

Benefits offered by this job

Employer pension 28.97%

25 days annual leave + bank holidays

Flexible working options

Job summary

DVSA is seeking a Lead Cyber Security Monitoring professional to join the Security Operations Centre. You will lead rapid detection, investigation and response to cyber incidents, ensuring threats are contained and service quality is maintained.

Responsibilities include threat hunting, vulnerability management, post-incident reviews, improving SOC processes, and providing expert guidance to senior leaders and partners; occasional travel to other offices may apply.

Qualifications

• Demonstratable experience working with a SIEM tool and vulnerability scanners.
• Ability to explain technical concepts clearly to both technical and non-technical audiences.
• Experience interpreting threat intelligence and configuring IDS/IPS rules.
• Knowledge of security concepts including risk management and incident management.
• Experience leading small monitoring teams to design and enable automated monitoring processes.

Responsibilities

• Lead rapid detection, investigation, and response to cyber security incidents, ensuring threats are contained and incidents are handled in line with DVSA policies.
• Drive proactive cyber defence through threat hunting and vulnerability management.
• Manage post-incident reviews, including root cause analysis, to drive policy and monitoring improvements.
• Improve SOC processes and protective monitoring capabilities to meet contractual and policy obligations.
• Plan, lead, and evaluate incident response exercises, including red-team activities.
• Provide expert advice to senior leaders and technical teams on risks and controls.
• Build relationships with DVSA and external partners, including regulators and suppliers.
• Produce incident summaries, performance statistics, lessons learned, and recommendations for improvements.
• Mentor and lead SOC analysts, modelling professional standards and Civil Service values.

Skills

SIEM experience

Vulnerability scanners

Clear communication

Threat intelligence

Security monitoring

Education

Degree in IT or Cyber Security

CSSP

CISSP

Professional qualification related to cyber security

Tools

Microsoft Sentinel

Splunk

Job description

DVSA is seeking a Lead Cyber Security Monitoring professional to join the Security Operations Centre. You will lead rapid detection, investigation and response to cyber incidents, ensuring threats are contained and service quality is maintained.

Responsibilities include threat hunting, vulnerability management, post-incident reviews, improving SOC processes, and providing expert guidance to senior leaders and partners; occasional travel to other offices may apply.