Security Operations Consultant (Cybersecurity)

Location: Belfast, United Kingdom; hybrid work with at least two days per week in an office or client site, and up to five days per week at a client site depending on the assignment.

Company

hirify.global is a global consulting firm combining strategy, innovation, design, technology, science, engineering, and digital expertise to help clients solve complex challenges.

What you will do

• Lead and develop SOC analysts and incident response specialists through operational direction, coaching, and support.
• Coordinate live cyber incident investigations, containment, eradication, recovery, stakeholder communications, and post-incident reviews.
• Assess and improve security operations for enterprise and public sector clients across people, processes, and technology.
• Optimise SIEM, SOAR, EDR/XDR, threat detection, and cloud security monitoring capabilities.
• Develop incident playbooks, standard operating procedures, automated response workflows, and tabletop exercises.
• Share security operations expertise through consulting, mentoring, knowledge sharing, and internal initiatives.

Requirements

• Experience running or supervising a SOC, CSOC, or incident response team.
• Practical experience managing live cyber incidents, including ransomware, account takeovers, or supply chain breaches.
• Hands-on experience with SIEM/SOAR tools such as Microsoft Sentinel and Splunk, plus EDR/XDR platforms such as Microsoft Defender for Endpoint and CrowdStrike Falcon.
• Knowledge of MITRE ATT&CK, NIST CSF, NCSC CAF v4.0, and ISO 27001.
• Ability to write concise incident reports and communicate with engineers and business leaders.
• Applicants must be British citizens or have been continuously resident in the UK for the past five years to meet security clearance requirements; background checks and Baseline Personnel Security Standard screening are required.

Nice to have

• Experience in management consulting, managed services, or client-facing advisory roles.
• Experience in regulated UK environments such as central government, defence, or critical national infrastructure.
• Hands-on experience with cloud security monitoring in AWS, Azure, or GCP.

Culture & Benefits

• Cross-disciplinary collaboration with cybersecurity, product, design, and technology specialists.
• Technical career progression, coaching, mentoring, knowledge sharing, and a development budget for training and certifications.
• Private healthcare for employees and families, 25 days of annual leave, and the option to buy five additional days.
• Company pension scheme, annual performance-based bonus, and PA share ownership.
• Tax-efficient benefits, community and charity initiatives, and support for physical, emotional, social, and financial well-being.

Hiring process

• Recruiter call to discuss the application, role, and company.
• Two 60-minute competency or technical interviews.
• Final 60-minute meeting with a PA leader including a mini case study and discussion of client-centricity.