Our client is looking for a Head of Security Operations to define and lead a next-generation security operations capability built around automation, detection engineering, and high-quality incident response.
You will shape how the function operates, lead complex security events, and work across client engagements, internal product teams, and senior stakeholders to turn operational insight into a stronger service and platform.
This role is focused on building a lean, intelligence-led, automation-first security operations model rather than running a traditional alert-triage SOC.
Responsibilities
- Define and lead the security operations function across strategy, tooling, delivery standards, process design, and team development.
- Design and implement an automation-first detection and response model across SIEM, EDR, SOAR, and vulnerability management capabilities.
- Own incident response end-to-end, leading live investigations through triage, containment, eradication, recovery, post-incident review, and client debrief.
- Build and refine detection engineering practices, including threat modelling, rule development, tuning, use case design, and coverage mapping against MITRE ATT&CK.
- Lead complex investigations and high-severity incidents personally, providing deep technical direction where automation or junior resource is not enough.
- Advise clients at senior stakeholder, C-suite, and board level, translating technical findings into clear business risk, impact, and remediation actions.
- Partner with Product and CTO teams to feed operational learning, client requirements, and detection insights into the platform roadmap.
- Contribute to enterprise sales activity through technical input, case studies, solution shaping, and credible support during client discussions.
- Mentor and develop junior security operations staff, setting a high bar for technical quality, judgement, and continuous improvement.
- Define and own KPIs, SLAs, reporting standards, and service quality measures for the security operations capability.