Senior Security Operations Leader: Incident Response & SIEM

Remote Worker LTD.; Belfast City District; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Health and lifestyle perks

25 days annual leave

Generous pension

Community and charity initiatives

Annual performance bonus

PA share ownership

Tax efficient benefits

Job summary

PA Consulting is seeking a Security Operations Manager to lead SOC analysts and incident responders within our Digital Trust & Cyber Security practice. You will guide live incident containment and day-to-day SOC operations while helping clients modernise SIEM, SOAR and EDR capabilities.

You’ll work across sectors, advise on tooling, develop incident playbooks, and coach teams in a hybrid, collaborative environment with a focus on client impact and security excellence.

Qualifications

• SOC leadership experience supervising a SOC/CSOC/IR team.
• Practical incident response experience managing live cyber incidents.
• Direct experience with SIEM/SOAR tools and EDR/XDR platforms.
• Solid understanding of MITRE ATT&CK, NIST CSF, NCSC Caf v4.0 and ISO 27001.
• Ability to write concise incident reports and communicate with engineers and leaders.

Responsibilities

• Lead and develop SOC analysts and incident response specialists with clear direction.
• Coordinate investigation, containment, eradication, recovery and post-incident reviews during incidents.
• Help clients assess and improve Security Operations capabilities across people, processes and technology.
• Advise on evolution and optimisation of SIEM, SOAR, EDR and threat-detection tooling.

Skills

SOC Leadership

Incident Response

Technical Stack

Security Frameworks

Communication

Job description

PA Consulting is seeking a Security Operations Manager to lead SOC analysts and incident responders within our Digital Trust & Cyber Security practice. You will guide live incident containment and day-to-day SOC operations while helping clients modernise SIEM, SOAR and EDR capabilities.

You’ll work across sectors, advise on tooling, develop incident playbooks, and coach teams in a hybrid, collaborative environment with a focus on client impact and security excellence.