Security Defence and Operation Lead

About the role

An experienced Security Defence & Operations Lead is needed to own incident response, vulnerability management and security operations within a dynamic technology environment.

Key responsibilities

• Lead remediation of security incidents identified by the Security Operations Center (SOC).
• Drive vulnerability management initiatives, prioritising and resolving risks efficiently.
• Validate incident resolution and patching activities across the environment.
• Manage and optimise Endpoint Detection & Response (EDR) solutions and network security controls.
• Develop and maintain incident response procedures, playbooks and operational processes.
• Monitor and manage third‑party security service providers against agreed service levels.
• Collaborate with internal stakeholders to align security operations with business and regulatory requirements.

Required profile

• Bachelor’s degree in Information Security, Computer Science, Information Technology or a related field.
• Relevant cybersecurity certifications such as CISSP, GCIH, CEH, Security+, CySA+; Microsoft security certifications (SC‑200, SC‑300, SC‑900) are advantageous.

Required skills

• Experience with Microsoft Defender for Endpoint and Microsoft Sentinel.
• Strong knowledge of incident response, vulnerability management and threat remediation.
• Proficiency with Endpoint Detection & Response (EDR) platforms and network security controls.

What we offer

• Opportunity to work with leading security technologies in an enterprise‑scale environment.
• Professional growth and career advancement within a forward‑thinking organisation.