At a Glance
- Tasks: Lead the design and implementation of automated security processes in a dynamic team.
- Company: Join a global organisation transforming its cyber security landscape.
- Benefits: Enjoy a competitive salary, 35% bonus, and excellent benefits with hybrid work options.
- Why this job: Be at the forefront of cyber security innovation and make a real impact.
- Qualifications: Experience in SOC engineering, IR automation, and security operations tooling is essential.
- Other info: This is a greenfield position with opportunities to shape future capabilities.
The predicted salary is between 57000 - 76000 £ per year.
Location: Hybrid – West London
Salary: £95,000 + 35% Bonus + Excellent Benefits
We’re looking to hire a Detection & Automation Lead for a global organisation undergoing major transformation in cyber security. This is a greenfield position for someone who thrives within the areas of strategy, engineering, and automation.
As part of a forward-thinking Security Operations team, you’ll play a critical role in designing and implementing scalable detection and response capabilities, integrating with a newly selected MSSP, and laying the groundwork for future internal capability expansion.
What you’ll be doing:
- Designing and implementing SOC process automation to eliminate manual overhead in alert triage, response, and reporting
- Integrating security tooling (SIEM, SOAR, firewalls, etc.)
- Creating automated playbooks to drive consistency and speed across IR workflows
- Collaborating with SOC analysts, engineers, and third-party vendors to identify automation opportunities
- Defining SLAs, KPIs, and operational procedures in partnership with the MSSP
- Helping develop the business case for an internal team as part of a long-term SOC strategy
We’re looking for someone who:
- Has a background in SOC engineering, IR automation, or security operations tooling
- Brings hands-on experience integrating and automating across diverse security platforms
- Can define and document workflows, metrics, and operational models
- Understands how to work with (or within) MSSPs and multi-vendor environments
- Thrives in a fast-moving, collaborative environment with room to lead and shape direction
Contact Detail:
Provide Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Detection and Automation Lead - Cyber Security
✨Tip Number 1
Familiarise yourself with the latest trends in cyber security, particularly in SOC automation and integration. This knowledge will not only help you during interviews but also demonstrate your passion for the field.
✨Tip Number 2
Network with professionals in the cyber security space, especially those who have experience in SOC environments. Engaging with them can provide insights into the role and may even lead to referrals.
✨Tip Number 3
Prepare to discuss specific examples of how you've successfully implemented automation in previous roles. Highlighting your hands-on experience will set you apart from other candidates.
✨Tip Number 4
Research the company’s current security posture and any recent developments in their cyber security strategy. Tailoring your conversation around their specific needs will show that you're proactive and genuinely interested in the position.
We think you need these skills to ace Detection and Automation Lead - Cyber Security
Some tips for your application 🫡
Tailor Your CV: Make sure your CV highlights relevant experience in SOC engineering, incident response automation, and security operations tooling. Use specific examples that demonstrate your ability to design and implement automation processes.
Craft a Compelling Cover Letter: In your cover letter, express your enthusiasm for the role and the company. Discuss how your background aligns with the responsibilities outlined in the job description, particularly your experience with integrating security tools and automating workflows.
Showcase Relevant Skills: Clearly list your technical skills related to SIEM, SOAR, and other security platforms. Mention any experience you have with defining SLAs, KPIs, and operational procedures, as these are crucial for the role.
Highlight Collaborative Experience: Since the role involves working with SOC analysts, engineers, and third-party vendors, include examples of past collaborations. Emphasise your ability to thrive in fast-paced environments and how you've successfully led projects or initiatives.
How to prepare for a job interview at Provide
✨Showcase Your Technical Expertise
Be prepared to discuss your hands-on experience with SOC engineering and security operations tooling. Highlight specific projects where you've integrated and automated security platforms, as this will demonstrate your capability to fulfil the role effectively.
✨Understand the Company’s Cyber Security Strategy
Research the organisation's current cyber security initiatives and their partnership with MSSPs. This knowledge will allow you to ask insightful questions and show that you're genuinely interested in contributing to their transformation.
✨Prepare for Scenario-Based Questions
Expect to face scenario-based questions that assess your problem-solving skills in real-world situations. Think about past experiences where you designed automated playbooks or improved SOC processes, and be ready to explain your thought process.
✨Emphasise Collaboration Skills
Since the role involves working closely with SOC analysts, engineers, and third-party vendors, highlight your ability to collaborate effectively. Share examples of how you've successfully worked in teams to identify automation opportunities and drive projects forward.