Security Operations Centre Lead
On site
Hemel Hempstead, United Kingdom
Full Time
22-04-2025
Job Specifications
Security Operations Centre Lead is required by Logic to work for a large scale industry leading organisation based in Hemel Hempstead.
As a SOC Shift Lead, you will ensure the smooth operation and continual enhancement of SOC processes and personnel. You will play a pivotal role in protecting client systems and guiding the team through sophisticated cyber defence challenges.
Your responsibilities will include:
Monitoring, triaging, and investigating alerts across host and network security systems
Performing deep analysis of traffic, logs, and system events to identify threats and vulnerabilities
Providing line management to SOC Analysts (team of 4) -developing capability and supporting career progression
Enhancing team knowledge across SOC tooling, detection methodologies, and threat triage
Analysing and optimising detection rules and use cases based on Mitre Att&ck
Maintaining detailed and up-to-date incident documentation, findings, and mitigation strategies
Acting as a representative of the SOC in key meetings and internal stakeholder engagements
In order to be successful for this role you will need to be able to demonstrate the following experience:
Proven experience in a Security Operations Centre (SOC) environment
Experience working as a SOC Level 2
Previous people management or line management experience
Strong familiarity with SIEM platforms including Microsoft Sentinel and Splunk
Knowledge and use of the Mitre Att&ck Framework for detection and threat analysis
In-depth understanding of:
Client Server applications and multi-tier web environments
Relational databases, Firewalls, VPNs, enterprise AntiVirus solutions
Networking principles (eg TCP/IP, WAN, LAN, SMTP, HTTP, FTP, POP, LDAP)
* Please note this is a shift-based position, following a rotation of 2 days (6am-6pm), 2 nights (6pm-6am), 4 days off*
Due to the highly secure nature of this work all applicants will be required to gain UK Security Clearance to the highest level. You must be a British National who has been resident in the UK for at least the last 10 years and you cannot have been outside the UK for more than 28 days on any one occasion within the last 5 years.
To apply for this role please send your CV in the first instance and if relevant you will be contacted with full role and company information.
We are passionate about promoting diversity, inclusion, and equality, and are committed to working with clients who share our outlook. We offer equal opportunities to all candidates regardless of background, identity, sexuality, and disability. We strive to create inclusive cultures where diversity is seen as real value for the company. Our mission is for everyone to feel empowered to be their true authentic selves at work.
About the Company
Founded in 2004 in Cobham, Surrey. Logic Engagements recruit contract and permanent staff across EMEA for: IT, Digital, Tech & Change, Finance, Marketing, eCommerce & rail markets. We have worked with some of the worlds biggest brands helping them deliver global transformation programmes within a number of areas including Digital, Cloud, Agile, Data & Finance etc. We know that most agents would use this space to wax lyrically about how unique, brilliant and downright wonderful they are and we could do the same but you’d ... Know more
Related Jobs
- Company Name
- Ventula Consulting
- Job Title
- GRC Analyst – Information Security - FTSE 100 Market Leader
- Job Description
- GRC Analyst – Information Security - FTSE 100 Market Leader GRC Analyst with a focus on infosec governance, risk and compliance required by a market leading brand. The information security analyst will assist in establishing and monitoring the corporate information security policy, standards, procedures, guidelines, internal controls and business continuity to ensure critical Information is protected, in alignment to Cyber Security best practice and data protection regulation. This role requires a particular knowledge around PCI DSS, and ideally my client is looking for an individual who has worked to help an organisation achieve PCI DSS compliance working with 3rd party experts. The focus of this role will be to represent information security being able to interpret technical design and how information security best practices should be applied. Also be able to lead with incident management investigations and conduct risk and vulnerability assessments where appropriate. Key Accountabilities & Responsibilities Role Accountabilities Conduct risk and vulnerability assessments to identify and mitigate security risks Represent information security within projects ensure best practice is adhered to. Coordinate across departments to ensure risk is managed through compressive security measures and polices Incident response and management – lead and participate in complex incident investigations Develop and maintain cyber incident response plans and playbooks. Conduct post-incident reviews and implement lessons learnt to improve the organisation’s security posture Requirements: Either Technical Operations Security experience with an interest to work within a governance role or experience working in a Security Governance role Ability to assess system controls based on a documented standard Will be able to demonstrate ability in problem analysis and resolution Strong communication skills to be able to influence best practice at all levels of the organisation, with the ability to explain technical problems to non-technical business stakeholders at all levels Ability to build effective relationships to influence and negotiate business outcomes Experience of working with and presenting findings to Senior Stakeholders Hold recognised Cyber Security qualification (CISA, CISMP, CISM or equivalent). Knowledge of industry related frameworks such as ISO27001, PCI DSS This role is based in Northampton and is a hybrid position with on average 2 days a week on-site. The salary is between £50-£60k + Bonus + Package.
Northampton, United Kingdom
Hybrid
Full Time
07-05-2025
- Company Name
- Alvarez & Marsal
- Job Title
- Director, Security Operations Center - Global Security Office
- Job Description
- Please note that this role is London based, working Mon-Fri 9am to 6pm with 3 days in the office and 2 from home. About the firm Alvarez & Marsal (A&M) is a global consulting firm with over 10,000 entrepreneurial, action and results-oriented professionals in over 40 countries. We take a hands-on approach to solving our clients' problems and assisting them in reaching their potential. Our culture celebrates independent thinkers and doers who positively impact on our clients and shape our industry. The collaborative environment and engaging work—guided by A&M's core values of Integrity, Quality, Objectivity, Fun, Personal Reward, and Inclusive Diversity—are why our people love working at A&M. The Team Alvarez and Marsal Global Security Office is committed to delivering the highest standards of security and compliance. We are seeking a highly skilled and motivated Director to lead A&M’s Security Operations Center (SOC) and join our dynamic and growing team based in either our London or Tampa office. How you will contribute The Director of SOC will play a critical role in, overseeing the 24/7/365 monitoring, detection, and response to cybersecurity threats and incidents, ensuring operational excellence, threat intelligence integration, and alignment with the organization’s security objectives. The ideal candidate is a proven cybersecurity leader with a deep understanding of security operations, threat landscapes, incident response, and team leadership. This individual will play a key role in shaping the future of our cyber defense capabilities. Responsibilities • Lead and manage the daily operations of the Security Operations Center, including managing a multi-tiered team of managers, analysts, and incident responders. • Develop and execute SOC strategy, goals, and KPIs in alignment with organizational cybersecurity and business objectives. • Oversee incident detection, triage, investigation, and coordinated response efforts to mitigate threats in real time. • Ensure continuous improvement of security monitoring tools, automation, playbooks, and threat detection capabilities. • Collaborate with other cybersecurity teams, IT, legal, compliance, and business units to ensure an integrated approach to incident handling and threat mitigation. • Manage relationships with third-party vendors, MSSPs, and threat intelligence providers. • Prepare and present metrics, risk assessments, and incident reports to executive leadership and board-level stakeholders. • Lead post-incident reviews to improve processes and resilience. • Maintain up-to-date knowledge of the threat landscape, emerging technologies, and compliance requirements. • Develop training and professional development plans to continuously grow team capabilities. Preferred Qualifications • Bachelor’s degree in Computer Science, Information Security, or a related field (Master’s preferred). • Extensive experience in cybersecurity leadership within a SOC or incident response function. • Strong knowledge of security technologies, SIEM platforms (e.g., Chronicle, Splunk, QRadar), EDR tools, firewalls, and network security. • Experience with security frameworks and regulations (NIST, ISO 27001, MITRE ATT&CK, CIS, etc.). • Demonstrated experience leading security incident investigations and crisis response. • Excellent leadership, communication, and project management skills. • Relevant certifications such as CISSP, CISM, GIAC, or equivalent are highly preferred. Preferred Skills • Experience managing global or follow-the-sun SOC operations. • Familiarity with cloud security operations (AWS, Azure, GCP). • Proficiency with automation and orchestration tools (SOAR platforms). • Strong analytical mindset and the ability to make high-pressure decisions.
London, United Kingdom
Hybrid
Full Time
07-05-2025
- Company Name
- Funding Circle UK
- Job Title
- Junior Security Engineer
- Job Description
- Description Junior Security Engineer We are seeking an enthusiastic and motivated Junior Security Engineer to join our dynamic Security Team. This is an excellent opportunity to kick-start or develop your career in cybersecurity within a fast-paced FinTech environment. You will support our Cloud and Application Security initiatives, learning from experienced engineers and contributing to the protection of our platform and customer data. You will assist in implementing security controls, supporting the secure software development lifecycle (SSDLC), helping to strengthen our security posture. This role is ideal for someone passionate about security and eager to develop their skills in AWS, DevSecOps, and Application Security, quickly becoming a productive member of the team, taking ownership of specific security tasks and helping to implement robust security solutions in our fast-paced FinTech environment. Who are we? We’re Funding Circle. We back small businesses to succeed. At Funding Circle, we believe the world needs small businesses. That’s why we’ve made it our mission to help them get the finance they need to grow. With more than a decade of expertise under our belt, we’ve built a game-changer of a platform with cutting-edge data and technology that’s reshaping the landscape of SME lending. Say goodbye to lengthy applications and hello to lightning-fast decisions! In just minutes, SMEs across the UK can get a decision, giving them access to competitive funding in a flash. We know that good business is about good people. So we pride ourselves on providing meaningful, human support as well as fast, hassle free processes to deliver an unbeatable customer experience. The role Support the implementation and adoption of secure software development lifecycle (SSDLC) practices and secure coding standards across engineering teams through collaboration, training, and tooling. Assist with configuring, managing and monitoring automated security controls, tooling, and "security rails" within CI/CD pipelines to ensure secure and efficient deployments. Collaborate closely with Cloud Platform Engineers, DevX and Product Engineering to ensure security requirements are integrated into system designs and technology choices from the outset. Participate in threat modelling exercises for cloud-native applications, microservices, and infrastructure components. Support internal and external penetration testing engagements for Funding Circle applications, services, and cloud infrastructure. Contribute to vulnerability management processes, focusing on strategic remediation, root cause analysis, and preventative measures. Assist in developing and implementing security automation across cloud infrastructure configuration, vulnerability management, and compliance monitoring. Contribute to the implementation of robust security architectures, controls, and best practices within our AWS cloud environment. Grow your expertise in cloud security (AWS), DevSecOps, and application security, becoming a key contributor in these areas. Proactively identify areas for security improvement and contribute to security initiatives. Proactively monitor the threat landscape, evaluate emerging cloud security risks and trends, and translate them into actionable security improvements. What we’re looking for Hands-on experience (e.g. 1+ years) in Information Security, with a demonstrable keen interest in AWS cloud security and application/product security. Proven ability to learn technical concepts quickly and apply them effectively. Hands-on experience with cloud platforms (AWS strongly preferred), including basic infrastructure and security concepts (e.g., IAM, VPC, Security Groups). Familiarity with core application security principles (e.g., understanding OWASP Top 10 vulnerabilities) Experience with or strong aptitude for learning security tools (e.g., Wiz, SAST, DAST, SCA, vulnerability scanners). Knowledge of or familiarity with Infrastructure as Code (IaC), particularly Terraform, is a plus. Familiarity with container technologies (Docker, Kubernetes) is a bonus. Good knowledge of relevant security frameworks and standards (e.g., NIST CSF, CIS Benchmarks, OWASP ASVS). Exposure and knowledge of the MITRE ATT&CK framework. Strong communication skills, with the ability to articulate complex security concepts clearly to technical audiences. Strong analytical and problem-solving skills with attention to detail. Nice to have Foundational or Associate-level certifications (e.g., AWS Certified Solutions Architect - Associate, AWS Certified Security - Specialty (or willingness to obtain), CompTIA Security+, relevant SANS certs). Experience with specific security platforms/tools (e.g., Wiz, Snyk, Checkmarx, Veracode). Basic scripting skills (e.g., Python, Bash) for automation tasks are highly desirable. Experience working in FinTech or other highly regulated environments. Experience with mobile application security principles and testing. At Funding Circle we are committed to building diverse teams so please apply even if your past experience doesn’t align perfectly with the requirements. Want to learn more? We have a huge impact on the businesses that borrow through our platform, the communities they serve and the overall economy (last year £6.9bn of GDP generated). You can read our full Impact Report here: https://www.fundingcircle.com/uk/impact To see what our customers think, visit our Trustpilot page: https://uk.trustpilot.com/review/fundingcircle.com And we’re still evolving! Our award-winning multi-product platform is solving more SME finance challenges than ever before. We think big, rally together and meet the needs of SME customers like no other. Why join us? At Funding Circle, we celebrate and support the differences that make you, you. We’re proud to be an equal-opportunity workplace and affirmative-action employer. We truly believe that diversity makes us better. As a flexible-first employer we offer hybrid working at Funding Circle, and we've long believed in a 'best of both' approach to in-office collaboration and non-office days. We expect our teams to be in our London office two times a week, where you can take advantage of our newly refurbished hybrid working space, barista made coffee and subsidised lunches (via JustEat) every day! We back our Circlers to build their own incredible career, making a difference to small businesses every day. Our Circler proposition is designed to support employees both in and out of work, and it is anchored around four pillars: Health, Wealth, Development & Lifestyle. A Few Highlights Health: Private Medical Insurance through Aviva, Dental Insurance through Bupa, MediCash, access to free online therapy sessions and exclusive discounts with Hertility for reproductive health support. Wealth: Octopus Money Coach, free mortgage advisor partnership and discounts across numerous retailers through Perks at Work. Development: Dedicated annual learn...
London, United Kingdom
Hybrid
Full Time
07-05-2025
- Company Name
- Pharmacy2U Ltd
- Job Title
- Network & Security Architect
- Job Description
- Role: Network & Security Architect Location: Leeds/hybrid Salary: Up to £90K DOE, plus extensive benefits Contract type: Permanent Employment type: Full time Working hours: 37.5 hours per week, Mon-Fri Do you want to work for the nation’s largest online pharmacy ensuring excellence for all our patients? We’re a market leader in the pharmacy world, with 25 years’ experience, helping over 1.4 million patients in England manage their NHS prescriptions from request through to delivery. We are Great Place to Work certified as we consider colleague experience a top priority every day. Our people are fundamental to our success and ensuring we achieve our vision to be a world leading, patient-centric digital healthcare provider. We are committed to continuing to develop a positive, open and honest working environment for all. The Network and Security Architect plays a pivotal role in designing, implementing, and maintaining secure, scalable, and high-performing network and security solutions. This role ensures that network architectures meet business needs while complying with stringent security standards and regulatory requirements. The Network and Security Architect will for gather business and technical requirements, create robust network and security designs (on-premises and cloud-based), and act as the subject matter expert for identity, access management, and cybersecurity strategies across the enterprise. In addition to supporting implementation teams, this role ensures successful project delivery through technical leadership, governance, documentation, and handover to operational support teams. What’s in it for you? Occupational sick pay Enhanced maternity and paternity pay Contributory pension Discounted insurance (Aviva) Employee discount site Discounted gyms (via our blue light card and benefits schemes) Employee assistance programme In-house mental health support Free onsite parking Health and wellbeing initiatives Social events throughout the year Cycle to work scheme Green car scheme*(subject to minimum earnings) Registration fees paid (GPhC, NMC, CIPD etc) Long service bonus Refer a friend bonus Blue light card Hybrid working Commitment to CPD/training 25 days annual leave increasing with service Annual leave buy and sell scheme Discounts & Exclusive offers at The Springs, Leeds 25% Discount & health & beauty purchases 25% Discount on Pharmacy2U Private Online Doctor Services What you’ll be doing? Define, create, and implement secure network and security architectures for enterprise environments, including hybrid cloud deployments. Implement advanced identity and access management (IAM) and privilege management solutions across large-scale organisations. Integrate security controls within network designs, including network segmentation, firewalls, VPNs, and secure connectivity models. Deliver network authentication solutions such as 802.1x to enhance enterprise network security. Design and implement security frameworks aligned with business objectives and compliance requirements (e.g., ISO 27001, NIST). Act as the primary design authority on network and security solutions across projects. Gather and interpret business and technical requirements to develop appropriate security and network architectures. Engage and collaborate with technical teams, business stakeholders, and security governance bodies. Support implementation teams, ensuring delivered solutions meet security, performance, and compliance standards. Establish and enforce network and security best practices, standards, and guidelines. Conduct security assessments and architecture reviews to ensure solutions are resilient against cyber threats. Implement network and security monitoring strategies to proactively identify and remediate risks. Drive adoption of Sero Trust principles and secure-by-design methodologies. Create detailed design documentation and operational guides for support teams. Ensure successful knowledge transfer and support readiness for deployed solutions. Continuously evaluate and optimise network and security architectures to adapt to evolving threats and technologies. Who are we looking for? Extensive expertise in enterprise network architecture, with hands-on experience in Azure networking, firewalls, VPNs, SD-WAN, and network security tools. In-depth knowledge of network authentication protocols, especially 802.1x. Proven experience implementing identity and access management (IAM) and privileged access management (PAM) solutions. Strong understanding of cybersecurity principles, network segmentation, and Zero Trust Architecture. Knowledge of integrating Linux systems with enterprise security and Active Directory environments. Certified Data and Cloud Architect on Azure What happens next? Please click apply and if we think you are a good match, we will be in touch to arrange an interview. Applicants must prove they have the right to live in the UK. All successful applicants will be required to undergo a DBS check. Unsolicited agency applications will be treated as a gift. #INDTECH
Leeds, United Kingdom
Hybrid
Full Time
07-05-2025