Security Operations Lead

Security Operations Lead - SOC, Azure DevSecOps - UK Remote - BPSS (Baseline Personnel Security Standard) Lead Security Operations. Build Security Engineering. Protect a Global SaaS Platform. We are partnering with a technology organisation that operates a large-scale, cloud-native SaaS platform serving millions of users globally.

Due to continued growth, they are seeking an experienced Security Engineering & SOC Lead to drive both security engineering and security operations across a modern Microsoft Azure estate. This is a rare opportunity for a hands-on cyber security professional who enjoys building security controls, improving SOC effectiveness, mentoring analysts, and leading incident response activities in a complex cloud environment.

Approximately 60% of the role is focused on security engineering, with the remainder centred on SOC leadership, detection engineering, and incident response. You'll lead a team of three analysts whilst remaining technically hands-on as the senior escalation point for complex investigations and security challenges.

The Role As Security Engineering & SOC Lead, you will be responsible for designing, implementing, and continuously improving the security controls, monitoring capabilities, and operational processes that protect a large Azure-based platform.

Working closely with architecture, engineering, and development teams, you'll ensure security is embedded across infrastructure, applications, and delivery pipelines. Key Responsibilities Security Engineering Implement Azure security controls and platform guardrails.

Deploy and manage Azure Policy, Defender for Cloud, Conditional Access, Privileged Identity Management (PIM), Key Vault, Managed Identities, Azure Firewall and WAF solutions. Deliver DevSecOps tooling across GitHub Actions and Azure Pipelines.

Implement SAST, SCA, secrets scanning, container security and Infrastructure-as-Code scanning. Drive supply chain security initiatives including SBOM generation, artefact signing and policy enforcement. Harden AKS and cloud-native services through Infrastructure-as-Code and automated security controls.

Work with engineering teams to remediate vulnerabilities, penetration test findings, and security risks. Support threat modelling, security reviews, and secure software development practices. Security Operations & Detection Engineering Lead day-to-day SOC operations.

Own Microsoft Sentinel administration and optimisation. Develop and tune detection logic using KQL and MITRE ATT&CK methodologies. Lead incident response, investigation, containment and post-incident reviews. Build automated response workflows using Logic Apps and security playbooks.

Conduct proactive threat hunting across platform telemetry. Manage security monitoring, logging standards and onboarding of new services into the SIEM. Produce dashboards, metrics and reporting on SOC performance and security posture. Te...

Report this job