Technology Cyber Security Operations Manager

Cooley LLP; City of Westminster; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A leading security firm in the United Kingdom is seeking a Security Operations Lead to oversee day-to-day security operations and incident responses. The role requires extensive experience in a cloud-first environment, effective SIEM operation, and strong incident response capabilities. Successful candidates will have the opportunity to shape security operations and contribute to continuous improvement efforts for enhancing organizational security. This hybrid role offers significant responsibilities and a competitive salary package.

Benefits

Salary up to £80,000

27 days holiday plus bank holidays

Remote work with travel allowance

Private medical insurance

Learning budget of £750

Wellness support initiatives

Qualifications

• Proven experience managing security operations in a cloud environment.
• Hands-on experience improving SIEM platforms and tuning rules.
• Experience with outsourced SOC or security partners.

Responsibilities

• Oversee day-to-day security operations and incident response.
• Manage the SIEM platform for alert quality and coverage.
• Lead vulnerability management activities.
• Collaborate with teams to embed security controls.

Skills

Cloud security management

Incident response

SIEM platform operation

Vulnerability management

Effective communication

Tools

Microsoft Sentinel

Microsoft Defender

Job description

Security Operations Lead

We are looking for an external security operations partner. This is an exciting opportunity to play a key role in strengthening and evolving our security operations as the business continues to grow. You'll have ownership of day‑to‑day security operations, incident response, and continuous improvement of our security capabilities to help protect Seccl and our customers.

The Infrastructure and Security team sits at the heart of Seccl's technology organisation, ensuring the resilience, availability and security of our platform that underpins everything we do. The team's mission is to enable the business to scale securely by embedding strong security controls, rapid threat detection and effective incident response into our day‑to‑day operations. With ongoing investment in cloud security, SIEM maturity and vulnerability management, the team is driving several key initiatives to continuously raise Seccl's security posture.

Location & Contract

London – Hybrid. Initial contract until the end of August 2026. Rate: £550/day. Inside IR35. Clearance: BPSS.

About Us

Seccl is the Octopus‑owned embedded investment platform that's on a mission to help more people invest – and invest well. We're B‑Corp certified with an amazing product‑market fit, impressive early traction and the potential to transform an outdated industry, for the better. We’re growing fast and will scale even faster over the next few years. We’re also proud to be part of Octopus, the £multi‑billion group that’s on a mission to breathe new life into broken industries, through companies like Octopus Energy, Octopus Investments and Octopus Money.

Responsibilities

• Oversee day‑to‑day security operations, ensuring effective detection, investigation and response to security events.
• Manage and tune the SIEM platform to improve alert quality, coverage and operational effectiveness.
• Work with an outsourced security operations partner to triage alerts and coordinate incident response.
• Lead vulnerability management activities, prioritising remediation based on risk.
• Collaborate with infrastructure, IT and application teams to embed effective security controls.
• Integrate threat intelligence into detection and response workflows.
• Monitor and report on security metrics, incidents and trends to key stakeholders.

This role is for you if

• Have proven experience leading or managing security operations in a cloud‑first environment, ideally AWS.
• Are confident operating and improving a SIEM platform, with hands‑on experience of tuning, rules and integrations.
• Have experience working with outsourced SOC or security partners and managing alert triage and escalation.
• Understand the full vulnerability management lifecycle and can prioritise remediation based on risk.
• Have strong incident response skills and are comfortable leading investigations and post‑incident reviews.
• Can communicate clearly with both technical and non‑technical stakeholders across the business.
• Have experience with Microsoft Sentinel and Microsoft Defender security tools is desirable.

This role isn’t for you if

• You rely on a lot of top‑down direction. Here, you’ll have a lot of freedom and ownership of your role, and you’ll be expected to shape your own progression.
• You’re not comfortable working in a fast‑paced environment. Our speed and scalability are what set us apart; you need to be able to act quickly and think on your feet.
• You struggle to follow through on ideas. We value people who do what they say they will.

What’s In It For You

• A salary between £60,000 and £80,000 – dependant on experience
• 27 days holiday + bank holidays (some can be flexible)
• Day off on your birthday
• Three days (full time) per year for Dependant leave
• Two volunteering days per year
• Option to work abroad for up to six weeks a year
• Secclbrate – our recognition programme that offers a mix of flexible rewards including extra pay, additional holiday and increased learning budget
• Length of service award – one month paid sabbatical at eight years
• 6% employer pension contribution, and life assurance
• Private medical insurance with AXA Health
• Enhanced parental leave
• MacBook and up to £500 home office set up budget
• £750 per person learning budget
• Health & wellbeing initiatives including free therapy via Wellness Cloud, mental health support via Headspace
• Strong financial wellbeing focus including access to Octopus Money, Octopus Share Incentive Plan and will writing offering via Octopus Legacy
• Perkbox – Flexi‑points giving you a range of discounts and perks including free weekly coffee, gym and retail discounts
• Access to initiatives like Cycle to Work and Octopus Electric Vehicle Leasing

Remote

Remote with occasional travel to Bath/London/Edinburgh once a quarter.

Interview Process

Interviewing is a two‑way thing, and we want you to have the time and opportunity to get to know us, as much as we want you to get to know us.