Threat Detection & Response Lead in London

What you'll be doing:
At Atech (part of the Iomart Group), we're a leading managed services and cybersecurity provider, helping organisations stay secure, resilient and one step ahead of emerging threats.
In this role, you'll be:
Leading and evolving our Threat Detection & Response capability, helping shape the future of our SOC services.
Taking the lead during major cyber incidents, providing technical direction and driving investigations to resolution.
Owning our threat intelligence programme, turning emerging threats into actionable security insights.
Driving detection engineering, improving our ability to identify and respond to threats across customer environments.
Overseeing vulnerability management, ensuring customers receive clear, practical remediation guidance.
Acting as the go-to technical escalation point for complex investigations, threat hunts and security events.
Leading proactive threat hunting activities to uncover risks before they become incidents.
Reviewing and approving key changes within the Threat Detection & Response service.
Working closely with customers during high-profile security events and escalations.
Coaching and developing senior analysts, helping build a high-performing and technically excellent team.
Improving processes, standards and investigation methodologies to strengthen service maturity.
Contributing cybersecurity expertise, threat intelligence and strategic insight across the wider Cyber Practice.
Supporting hiring, onboarding and development initiatives as the team continues to grow.
This is a hands-on leadership role for a cyber security expert who enjoys solving complex threats, mentoring others, and shaping cutting-edge detection and response services.
We want to hear from you if you:
Have significant hands-on experience with Microsoft Sentinel, Microsoft Defender XDR and Microsoft Entra ID Protection in an enterprise, MSSP or MDR environment.
Have a proven track record of threat hunting, detection engineering and incident response, including investigating complex attacks and developing high-quality detections.
Can demonstrate experience leading or coordinating major security incidents, providing clear direction while keeping stakeholders informed throughout.
Have strong knowledge of threat intelligence, attack chain analysis and multi-telemetry correlation, using these to improve detection and response capabilities.
Have experience overseeing or contributing to vulnerability management programmes, including risk prioritisation and remediation guidance.
Can define and implement technical standards, processes and operational improvements that raise the maturity of a Security Operations function.
Have experience managing, coaching and developing analysts or engineers, supporting career growth and building high-performing teams.
Are comfortable engaging with senior stakeholders and can communicate security risks, incidents and recommendations clearly and confidently.
Have experience working within a SOC, MDR or MSSP environment, with a strong understanding of modern threat detection and response practices.
Can provide technical leadership on security tooling, detection strategies and service improvements, balancing operational effectiveness with business priorities.
Build strong relationships with customers and internal stakeholders and can act as a trusted escalation point for complex security matters.
Continuously look for opportunities to improve detection coverage, reduce response times and enhance overall security outcomes.
Nice to have
Experience working across multi-cloud environments and security technologies beyond the Microsoft ecosystem.
Advanced security training or certifications from providers such as SANS, ISC2, ISACA or CREST.
Experience managing or overseeing an enterprise-scale vulnerability management programme.
Exposure to service development, presales activities or security service portfolio management.
Experience within a managed security services environment.
Above all, you're an experienced cyber security leader with deep detection and response expertise, a passion for developing people, and a proven ability to lead teams through complex security challenges while continually improving security outcomes.
What's in it for me?
Competitive salary and the opportunity to grow your career within a leading technology and cybersecurity business.
34 days annual leave including