Назад
Company hidden
7 дней назад

Security Operations Consultant (Cybersecurity)

Формат работы
hybrid
Тип работы
fulltime
Грейд
lead
Английский
b2
Страна
UK
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Security Operations Consultant (Cybersecurity): Leading SOC analysts and incident response specialists while improving enterprise and public-sector security operations with an accent on incident containment, SIEM, SOAR, EDR, and cyber resilience. Focus on coordinating live investigations, designing detection and response improvements, and advising clients across complex security environments.

Location: Belfast, United Kingdom. Hybrid working with at least two days per week in the office or at a client site; some assignments may require up to five days per week at a client site. Applicants must be British citizens or have been resident in the UK for the past five years to meet security-clearance residency requirements.

Company

hirify.global is a consulting firm of more than 4,000 strategists, innovators, designers, consultants, scientists, engineers, and technologists working across sectors including defence and security, financial services, government, health, manufacturing, energy, and transport.

What you will do

  • Lead and develop SOC analysts and incident response specialists across day-to-day security operations.
  • Coordinate live cyber-incident investigation, containment, eradication, recovery, stakeholder communication, and post-incident reviews.
  • Assess and improve enterprise and public-sector clients’ Security Operations capabilities across people, processes, and technology.
  • Advise on SIEM, SOAR, EDR/XDR, threat detection, and security analytics to improve visibility and response.
  • Develop incident playbooks, standard operating procedures, automated response workflows, and tabletop exercises.
  • Contribute to Security Operations services and internal knowledge sharing through coaching, mentoring, and collaboration.

Requirements

  • Experience running or supervising a SOC, CSOC, or Incident Response team.
  • Practical experience managing live cyber incidents, including ransomware, account takeovers, or supply-chain breaches.
  • Direct experience with major SIEM/SOAR tools such as Microsoft Sentinel or Splunk, and EDR/XDR platforms such as Microsoft Defender for Endpoint or CrowdStrike Falcon.
  • Solid understanding of MITRE ATT&CK, NIST CSF, NCSC CAF v4.0, and ISO 27001.
  • Ability to write concise incident reports and communicate comfortably with engineers and business leaders.
  • Eligibility for required UK background checks and the Baseline Personnel Security Standard; some roles may require higher National Security Vetting.

Nice to have

  • Experience in management consulting, managed services, MSSP, or client-facing advisory roles.
  • Experience in regulated UK environments such as Central Government, Defence, or Critical National Infrastructure.
  • Hands-on familiarity with cloud security monitoring in AWS, Azure, or GCP.

Culture & Benefits

  • Work in cross-disciplinary teams with cyber security, product, design, and technology specialists.
  • Flexible career development with technical and Partner career tracks, coaching, mentoring, and knowledge sharing.
  • Access to a development budget for technical and non-technical training and professional certifications.
  • Private healthcare for employees and families, 25 days of annual leave plus a Christmas Eve half-day, and the option to buy five additional days.
  • Company pension scheme, annual performance-based bonus, PA share ownership, tax-efficient benefits, and community and charity initiatives.
  • Inclusive workplace focused on collaboration, learning, equality, and employee wellbeing.

Hiring process

  • Initial call with a Tech Recruiter.
  • Two 60-minute competency or technical interviews, covering both formats.
  • Final 60-minute meeting with a PA leader including a mini case study and discussion of client-centricity.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →