Senior SOC Manager - Cyber Energia

CFP Energy (UK) Ltd; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

A leading energy firm in Greater London seeks a Senior SOC Manager to lead its Global Security Operations Center. The role involves designing and managing a comprehensive SOC, focusing on both IT and operational technology security, while collaborating with external providers. Candidates must have extensive experience in cybersecurity and SOC leadership, with expertise in SIEM technologies and incident response management. The position offers opportunities for innovation in a dynamic environment.

Qualifications

• 12+ years of experience in cybersecurity, including 6+ in SOC leadership roles.
• Experience managing global security operations and teams across multiple regions.
• Deep knowledge of SIEM platforms and OT security frameworks.

Responsibilities

• Design and implement Cyber Energia global SOC strategy.
• Provide 24x7 oversight of security operations.
• Lead technology implementation and integration across global teams.

Skills

Cybersecurity leadership

OT/ICS security monitoring

Incident response

Vendor management

Technical communication

SIEM solutions

Tools

Graylog

Wazuh

Splunk

Azure Sentinel

Job description

Senior SOC Manager

We seek a dynamic and experienced Senior Manager to lead our Global Security Operations Center (SOC) at Cyber Energia. This critical role involves designing, building, and managing an effective SOC to safeguard our organization’s critical assets using cutting‑edge security technologies.

The Senior SOC Manager will oversee a hybrid security model, collaborating with an outsourced SOC provider while developing internal capabilities across global regions. A key focus of this position is securing Operational Technology (OT) environments, ensuring a robust and integrated security posture. We are looking for innovative, hands‑on leaders passionate about cybersecurity, open‑source technologies, and delivering results in a fast‑paced, global environment.

Responsibilities

SOC Strategy and Operations

• Design, implement, and manage Cyber Energia global SOC strategy, including processes, tools, and team structure.
• Provide 24x7 oversight of security operations across multiple geographic regions and time zones.
• Coordinate security monitoring and response activities across regional teams and offices.
• Develop and maintain security monitoring strategies, incident response procedures, and SOC playbooks tailored to regional and global needs.

OT Security Focus

• Develop integrated security monitoring solutions bridging IT and OT environments.
• Create specialized incident response procedures and playbooks for OT security incidents.
• Establish OT‑specific security monitoring, detection, and response capabilities.

Technology Implementation

• Lead the global implementation and integration of security technologies, including SIEM (e.g., Graylog, Wazuh, Splunk, Azure Sentinel), SOAR, EDR, and Threat Intelligence platforms.

Vendor and Team Management

• Serve as the primary liaison between the Information Security Organization and the outsourced SOC vendor, ensuring alignment of objectives.
• Establish, monitor, and enforce Service Level Agreements (SLAs) with the outsourced SOC provider.
• Manage vendor relationships to ensure outsourced services meet Cyber Energia global security requirements.
• Build and mentor an internal security team to complement outsourced SOC capabilities.
• Facilitate knowledge transfer between the outsourced SOC and internal teams.

Performance and Reporting

• Create metrics, KPIs, and reporting frameworks to measure the effectiveness of both internal and outsourced SOC operations across regions.

Collaboration and Compliance

• Collaborate with IT, Legal, and other internal business teams to ensure security controls meet organizational needs.
• Stay current with emerging threats, vulnerabilities, and security trends to enhance Cyber Energia’s global security posture.
• Ensure compliance with international security standards and regional regulations (e.g., NIST, ISO, GDPR).

Requirements

• 12+ years of experience in cybersecurity, including 6+ years in SOC leadership roles.
• Proven experience designing, building, and operating a Security Operations Center.
• Experience managing global security operations and teams across multiple geographic regions.
• Strong experience with Linux environments.
• Passionate about open‑source technologies.
• Willingness to be a hands‑on manager, actively engaging in technical tasks as needed.
• Experience managing third‑party security service providers and vendor relationships.
• Deep technical knowledge of SIEM platforms (e.g., Graylog, Wazuh, Splunk, Azure Sentinel).
• Hands‑on experience implementing and managing SOAR, EDR, and Threat Intelligence solutions.
• Expertise in OT/ICS security monitoring and incident response, with knowledge of OT protocols (e.g., Modbus, DNP3, OPC UA) and OT security frameworks.
• Understanding of security challenges specific to industrial control systems and SCADA environments.
• Strong understanding of the cyber kill chain, MITRE ATT&CK framework, and threat‑hunting methodologies.
• Experience leading incident response for significant security events on a global scale.
• Strong contract and SLA management skills.
• Excellent communication skills, with the ability to translate technical concepts for executive audiences.
• Knowledge of international security standards and regional regulatory requirements (e.g., NIST, ISO, GDPR).

The CFP Energy Group is committed to ensuring equal opportunities, fairness of treatment, dignity and respect, and the elimination of all forms of discrimination in the workplace for all employees/contractors and job applicants.