We are seeking a highly skilled SOC Engineer to take a leading role in defining and delivering our Cyber Security Operations Centre (CSOC). You will be at the forefront of detecting Real Time cyber security incidents, managing response and remediation efforts, and ensuring our cyber readiness and resilience. This role demands a strategic thinker who can provide expert advice to senior management, drive continuous improvement, and manage critical stakeholder relationships.

Key Responsibilities:

• Lead CSOC Delivery: Define and lead the delivery of the Cyber Security Operations Centre to detect, respond to, and remediate cyber security incidents and data breaches.
• Strategic Guidance: Provide strategic advice to senior management on incident response, monitoring, logging, and analysis of systems and processes.
• Incident Response Planning: Lead the development, communication, and continuous improvement of the cyber incident response plan.
• Cyber Investment Planning: Identify and plan for necessary cyber investments within the CSOC, including governance, tooling, and staffing.
• Vulnerability Management: Ensure adequate controls and practices are in place to identify and remediate vulnerabilities across the estate.
• Cyber Security Operations Strategy: Define and continuously develop a use case-driven logging, monitoring, and response capability to ensure the organisation's resilience against cyber security threats.
• Stakeholder Engagement: Coordinate with senior business leaders and external stakeholders to align the cyber security operations strategy with threat postures and government directives.

Typical Skills:

• Security Event Management: Expertise in managing Security Event Monitoring and operational responses using tools such as antivirus, network and host IDS/IPS, and logging systems.
• Cyber Regulations Knowledge: In-depth knowledge of cyber security regulations and industry frameworks, including GDPR, Network and Information Systems (NIS) regulations, and guidance from the National Cyber Security Centre (NCSC).
• Threat Monitoring & Intelligence: Proficiency in threat monitoring, intelligence gathering, vulnerability scanning, and implementing fixes and mitigations.
• Incident Response Management: Experience managing incident response processes, including the application of ITIL and Mitre ATT&CK frameworks.
• SOC Expertise: Experience as a Tier 3 SOC Engineer, particularly in Threat Hunting and Detections Engineering.

Minimum Requirements:

• SOC Transition Support: Provide expert security guidance to support the transition of the SOC as it evolves to support new systems and services.
• Strategic SOC Development: Shape the continuous improvement of cyber monitoring, detection, triage, and incident response processes.
• Use Case-Driven Capability: Develop and refine a use case-driven approach to logging, monitoring, and response that enhances the SOC's effectiveness.
• Cyber Strategy Development: Define the cyber security operations strategy in collaboration with senior business leaders and external stakeholders.

If you consider yourself to have a disability or if you are a veteran, and you meet the essential criteria for the role, you will be put forward for the Guaranteed Interview' scheme whereby you will have the opportunity to discuss this role and your suitability with a member of the Sourcing team.

If you are successful in securing this role, please note that for the entire duration of this contract, regardless of extension you will be working this role at the equivalent PAYE rate that has been advertised. For absolute clarity, we only work on a PAYE basis. If you wish to understand PAYE vs Umbrella more, please let us know and we can send you some additional information.