Core Responsibilities

• Operational & Security Leadership: Lead and manage the day-to-day operations of the SOC team, including 24/7/365 coverage across multiple clients
• Monitoring & Incident Response: Supervise the monitoring of security systems (firewalls, SIEM, endpoint protection) to identify, analyse, and mitigate threats
• Escalation Management: Handle high-priority incidents and coordinate responses between technical teams, vendors, and client stakeholders
• Performance & SLA Compliance: Ensure compliance with service level agreements and key performance indicators related to security incidents and response times
• Process Improvement: Develop, maintain, and implement policies, procedures, and documentation (SOPs) for incident response and security operations
• Knowledge Base & AI: Build and curate the team's knowledge base; identify and implement AI-driven optimisations to improve efficiency and detection capabilities
• Reporting: Create reports, dashboards, and metrics for internal leadership and client stakeholders

Required Skills & Abilities

• Technical Knowledge: Deep understanding of networking (TCP/IP, VLANs, routing), firewalls, and SIEM tools (e.g., Sentinel, Splunk, QRadar)
• Security Expertise: Knowledge of cyber-attacks, threat vectors, risk management, and vulnerability scanning
• Cloud Security: Experience with Azure security solutions (Defender, Sentinel, Entra ID) and cloud-native security architectures
• Management Skills: Strong leadership, team-building, and communication skills, with experience managing shifts and 24/7 operations
• Tools Proficiency: Experience with SIEM/SOAR platforms, vulnerability management solutions, and ticketing systems
• Analytical Thinking: Ability to work under pressure to troubleshoot, diagnose, and resolve complex security incidents

Qualifications

• Experience: 5+ years in security operations environments, with 2+ years in a management or supervisory capacity
• Education: Bachelor's degree in Computer Science, Information Technology, or related field (or equivalent experience)
• Certifications: CISSP, CISM, OSCP, or GIAC certifications are valued but secondary to demonstrated capability
• Language: Fluent English for client and stakeholder communication

We are also accepting CVs by e-mail, at people@modular.support.