Security Operations Lead

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Collaborate with a variety of stakeholders across the organization to ensure that security operations practices, policies, and systems are resilient, practical, and in alignment with strategic objectives.

• Establish, develop, and sustain a comprehensive security operations architecture that effectively addresses both current and emerging threats.

• Oversee the execution of cyber security projects and coordinate business security initiatives to reinforce the organization’s security posture and strategic aims.

• Offer expert consultancy to technology teams on both reactive (day-to-day issues) and proactive (strategic) security concerns.

• Maintain Security Operations documentation, records, and evidence to facilitate security assessments, audits, and compliance with legal, regulatory, and customer obligations.

• Supervise and enforce compliance with technical security policies, standards, best practices, and customer requirements.

• Lead the monitoring, detection, and investigation of security events and alerts; enhance security control automation, logging, alerting, vulnerability scanning, and threat detection capabilities.

• Oversee incident response procedures; coordinate incident management, ensure engagement of relevant stakeholders and third parties, and lead follow-up actions until resolution.

• Manage and supervise security testing, including internal automated technical controls, third-party assessments, and penetration tests, ensuring that findings are tracked and addressed.

• Ensure that security controls and processes are seamlessly integrated across systems, applications, and cloud infrastructure.

• Develop KPIs, SLAs, and dashboards to assess and report on performance metrics, including response times, false positives, and remediation progress.

• Stay informed about regulatory and compliance frameworks (e.g., EU Cyber Resilience Act, EU AI Act, ISO 27001, GDPR, PCI-DSS, NIST, NCSC), changes in the threat landscape, and emerging technologies.

• Collaborate across the organization and beyond to advocate for best practices within Digital Science, making recommendations for improvements to cyber security protocols in alignment with industry standards and insights gained from security incidents.

• Prepare responses and evidence related to cyber security for both internal and external stakeholders.

• Actively participate in information security forums, councils, and communities within and outside of the organization.

⛳️ Requirements

• You possess experience in implementing and managing SIEM, SOAR, EDR/XDR, vulnerability scanners, DLP, firewalls, and intrusion detection/prevention systems, among others.

• You have a solid understanding of cloud platforms, virtualization, and logging infrastructure, along with the capability to fine-tune alerts, minimize noise, monitor logs, and detect anomalies.

• You are knowledgeable about recognized frameworks such as MITRE ATT&CK, OWASP, etc.

• You have extensive experience in responding to security events and incidents, coordinating with stakeholders, executing post-incident reviews, and documenting lessons learned.

• You possess knowledge and experience in designing secure system architecture (networks, applications, identity and access), as well as drafting and enforcing security policies and standards.

• You have experience delivering security-related change programs, whether procured or internal, and managing third-party vendors; skilled in scoping, planning, and tracking projects.

• Relevant professional certifications are required.

• Experience working in or with a 24/7 Security Operations Centre (SOC) is essential.

• Familiarity with integrating threat intelligence and/or utilizing external threat feeds is necessary.

• Scripting or automation skills (Python, PowerShell, Terraform, etc.) to automate repetitive tasks are beneficial.

• Prior experience in environments where regulatory compliance and customer trust are paramount is required.

🏝️ Benefits

• We invest in, nurture, and support innovative businesses and technologies that enhance the research process, making it more open, efficient, and effective.

• We are courageous in our pursuit of improvement.

• We foster collaboration and inclusivity.

• We maintain an open-minded approach.

• We are committed to serving our community.

• Equal opportunity employer.