Security Operations Centre (SOC) Manager

This role combines people leadership, technical judgement and operational oversight. You will support the team to respond effectively to incidents while continuing to strengthen its detection and response capabilities and help it adapt as technology and the threat landscape evolve., * Lead, coach and develop the team, setting priorities and managing operational capacity.

• Ensure effective security monitoring, alert investigation, detection tuning and threat hunting.
• Act as an incident response lead, coordinating assessment, containment, escalation and recovery.
• Provide a technical escalation point for teams dealing with cyber incident-related issues.
• Own the operational use of threat intelligence.
• Set the Security Operations roadmap, balancing capability development, operational priorities, capacity and costs.
• Oversee the operational use of security monitoring and response tooling, working with technology teams on platform development and integrations.
• Provide security expertise to projects and technology teams, working with risk teams on controls and material risks.
• Represent Security Operations at relevant forums and report to senior leaders on threats, incidents, performance and capability gaps.
• Use incident reviews and operational evidence to improve detection’s, response procedures and ways of working., At Core-Asset, we’re committed to protecting and respecting your privacy. Our privacy statement explains when and why we collect personal information about people who engage with our services, how we use it, the conditions under which we may disclose it to others, and how we keep it secure. We may change this policy from time to time, so please check this policy occasionally to ensure that you’re happy with any changes.

• Experience leading a security operations, detection and response, or incident response team - either as a Team Leader or a Manager.
• Experience leading significant security incidents and coordinating technical and business stakeholders.
• Experience setting operational priorities and delivering improvements to security capabilities.
• Strong practical knowledge of security investigations, incident management, containment and recovery.
• Knowledge of common attack techniques, threat intelligence, threat hunting and prevention methods.
• Experience using security telemetry and monitoring tools to investigate threats and improve detection.
• An understanding of identity, endpoint, network and cloud security.
• A supportive and decisive manager who develops people while maintaining a strong operational service.
• Technical credibility to guide investigations and advise other teams, alongside the judgement to set direction and make sensible choices about priorities and resources.
• Able to bring structure to incomplete information during an incident, involve the right people and communicate clearly.
• Works well across technology and risk teams and is curious about emerging threats and technologies.
• An improvement mindset, with the ability to enable others.
• Experience managing operational costs or supplier services would be an advantage.
• A relevant security or incident response certification would be an advantage.

Core-Asset Consulting offers specialist recruitment services to asset management, accounting & finance, asset servicing, legal and the wider financial services sector in Scotland.