Security Operations Centre (SOC) Manager

Job Description:

Our client is looking to appoint a Team Manager to lead its Security Operations team and ensure effective detection of, and response to, cybersecurity threats.

You will help lead incident response, develop the team's defensive capability and help shape the Security Operations roadmap in line with the wider strategy.

This role combines people leadership, technical judgement and operational oversight.

You will support the team to respond effectively to incidents while continuing to strengthen its detection and response capabilities and help it adapt as technology and the threat landscape evolve.

Skills/Experience:

• Experience leading a security operations, detection and response, or incident response team - either as a Team Leader or a Manager.


• Experience leading significant security incidents and coordinating technical and business stakeholders.


• Experience setting operational priorities and delivering improvements to security capabilities.


• Strong practical knowledge of security investigations, incident management, containment and recovery.


• Knowledge of common attack techniques, threat intelligence, threat hunting and prevention methods.


• Experience using security telemetry and monitoring tools to investigate threats and improve detection.


• An understanding of identity, endpoint, network and cloud security.


• A supportive and decisive manager who develops people while maintaining a strong operational service.


• Technical credibility to guide investigations and advise other teams, alongside the judgement to set direction and make sensible choices about priorities and resources.


• Able to bring structure to incomplete information during an incident, involve the right people and communicate clearly.


• Works well across technology and risk teams and is curious about emerging threats and technologies.


• An improvement mindset, with the ability to enable others.


• Experience managing operational costs or supplier services would be an advantage.


• A relevant security or incident response certification would be an advantage.

Core Responsibilities:

• Lead, coach and develop the team, setting priorities and managing operational capacity.


• Ensure effective security monitoring, alert investigation, detection tuning and threat hunting.


• Act as an incident response lead, coordinating assessment, containment, escalation and recovery.


• Provide a technical escalation point for teams dealing with cyber incident-related issues.


• Own the operational use of threat intelligence.


• Set the Security Operations roadmap, balancing capability development, operational priorities, capacity and costs.


• Oversee the operational use of security monitoring and response tooling, working with technology teams on platform development and integrations.


• Provide security expertise to projects and technology teams, working with risk teams on controls and material risks.


• Represent Security Operations at relevant forums and report to senior leaders on threats, incidents, performance and capability gaps.


• Use incident reviews and operational evidence to improve detection's, response procedures and ways of working.

Core-Asset Consulting is an equal opportunities recruiter and we welcome applications from everyone irrespective of age, disability, gender, gender identity or expression, race, colour, ethnic or national origin, sexual orientation, religion or belief, marital/civil partner status or pregnancy.

To apply for this vacancy applicants must be eligible to work in the UK in accordance with the Immigration, Asylum and Nationality Act 2006.

At Core-Asset, we're committed to protecting and respecting your privacy.

Our privacy statement explains when and why we collect personal information about people who engage with our services, how we use it, the conditions under which we may disclose it to others, and how we keep it secure.

We may change this policy from time to time, so please check this policy occasionally to ensure that you're happy with any changes.

By engaging with us (either by applying for a job we're advertising, registering through our website, or getting in touch with our business) you're agreeing to be bound by this policy.

Core-Asset Consulting is committed to protecting the privacy of our candidates, clients and website users.

For further information, please refer to our full Privacy Statement available on our website http://www.core-asset.co.uk/about-core-asset/privacy-statement

Core-Asset Consulting offers specialist recruitment services to asset management, accounting & finance, asset servicing, legal and the wider financial services sector in Scotland.