Security Operations – Technical Lead

📋 Description

• Lead security operations strategy; liaison with the managed SOC
• Own end-to-end incident response: detection, triage, containment, review
• Lead phishing detection and response: triage emails, takedowns, awareness
• Build/tune detection rules and hunting queries in Sentinel/Defender XDR (KQL)
• Administer and optimize Defender suite (Endpoint, Cloud, Identity, O365)
• Oversee audits, controls and architecture reviews with IT/compliance

🎯 Requirements

• Security ops with SIEM (Sentinel), EDR/XDR (Defender), and SOAR
• KQL for Sentinel analytics, hunting, and workbooks
• Microsoft Defender suite administration (XDR, endpoint, identity, cloud)
• Phishing analysis/response and email security tooling
• IAM management – Entra ID/Azure AD, conditional access, MFA, PIM
• Vulnerability tools (Tenable, Defender) and SOC coordination; NIST/MITRE familiarity

🎁 Benefits

• Quarterly profit share based on company performance
• Career progression and mentorship programs
• Flexible/remote working options
• Pension, private healthcare, life assurance
• Wellbeing: gym discounts, Mindfulness, EAP
• Educational assistance and certs (AWS, Microsoft, Oracle, Red Hat)